Privacy Policy OkeSlot – Personal Data Protection for Malaysian Players

1Introduction & Scope of Privacy Policy

Welcome to OkeSlot's Privacy Policy. This document explains how OkeSlot ("we", "the platform") collects, uses, stores, and protects your personal data when you use the website, mobile app, or any services provided under the OkeSlot brand (okeslot.ws).

OkeSlot operates in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010. We believe privacy is a fundamental right of every user and we never compromise on this. This policy applies to all users of the OkeSlot platform, including registered players, general website visitors, and any other parties who interact with our services.

By registering an account or using the OkeSlot platform, you agree to the collection and use of your personal data as described in this policy. If you do not agree with any part of this policy, please stop using the platform and contact us to request deletion of your data.

2Personal Data We Collect

OkeSlot collects various types of personal data for the purposes described in this policy. Below are the categories of data we collect:

A. Account Registration Information

• Full name as shown on your MyKad or passport.
• An active Malaysian mobile phone number.
• A valid and active email address.
• Date of birth (for age verification).
• Password (stored in hashed form – not human-readable).

B. Identity Verification (KYC) Information

• A valid copy of your MyKad or Malaysian passport.
• Proof of current address (utility bill or bank statement).
• Payment method ownership details (account holder name for TNG, GrabPay, DuitNow, FPX).

C. Financial Transaction Data

• Deposit records via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks).
• Withdrawal and winnings records.
• Transaction history and account balances.

D. Platform Activity Data

• Game history – slots, Live Casino, lottery, Sports Betting (Malaysia Super League, EPL, badminton), and e-sports.
• Betting records and wager outcomes.
• Favourite game selections and platform activity.

E. Technical Data

• IP address at the time of login.
• Device type and web browser used.
• Login session times and dates.
• Cookie data for platform functionality.

3How We Use Your Personal Data

Personal data collected is used exclusively for the following purposes and for no other purpose without your consent:

OkeSlot uses your data to personalise your gaming experience – for example, recommending slots or Sports Betting options based on your previous preferences. This personalisation is for your convenience and your profile is never shared with any third party.

4Data Sharing with Third Parties

OkeSlot does not sell, rent, or disclose your personal data to third parties for marketing purposes. Data sharing only occurs in the following limited and controlled situations:

Service Providers (Data Processors)

OkeSlot works with trusted service providers that support the operation of the platform. They may only process your data in accordance with OkeSlot's instructions and are bound by strict data protection agreements:

• Payment processors – to verify and process Touch 'n Go, GrabPay, DuitNow, FPX, and other transactions.
• Game software providers – Pragmatic Play, PG Soft, Evolution Gaming, and others require session data to deliver gameplay.
• Email delivery service – to send account notifications and promotions that you have consented to receive.
• KYC solution provider – for identity verification in compliance with AML (Anti-Money Laundering) requirements.

Statutory Authorities

OkeSlot may disclose data to Malaysian authorities where required by law, court order, or in the course of a legitimate criminal investigation. OkeSlot will notify you of any such disclosure unless prohibited from doing so by law.

5Data Security Measures

OkeSlot continually invests in security infrastructure to ensure your personal data remains protected at all times. The technical and organisational security measures we employ include:

• Transmission encryption: All data is transmitted using TLS 1.3 with 256-bit SSL certificates for all communications between your browser and OkeSlot's servers.
• Storage encryption: Stored sensitive data is protected with AES-256 encryption. Passwords are hashed using the bcrypt algorithm, which is irreversible.
• Access control: Access to user data is restricted to OkeSlot staff who require it for their job responsibilities only, based on the principle of least privilege.
• 24/7 Monitoring: An active intrusion detection system (IDS) monitors the OkeSlot platform around the clock for any suspicious activity.
• Security audits: Independent security assessments are conducted at least once a year by qualified cybersecurity firms.
• Two-factor authentication (2FA): OkeSlot offers 2FA as an additional security layer for player accounts.

6Data Retention Period

OkeSlot retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by Malaysian law:

• Active account data: Retained for the duration that your OkeSlot account remains active.
• Financial transaction records: Retained for seven (7) years from the transaction date, in accordance with Malaysia's financial and tax regulatory requirements.
• KYC data (identity verification): Retained for seven (7) years after account closure.
• Security logs: Retained for two (2) years for incident investigation purposes.
• Marketing data (with consent): Retained until you withdraw consent or close your account.
• Closed account data: Basic information is retained for seven (7) years after account closure for legal compliance before being permanently deleted.

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be linked to any individual.

7Your Rights Under PDPA 2010

As a data subject under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding your personal data held by OkeSlot:

To exercise any of the rights above, please contact OkeSlot by email at support@okeslot.ws stating the type of request and your account number. OkeSlot will process the request within 14 business days.

8Cookie & Tracking Technology Usage

OkeSlot uses cookies and similar technologies to ensure the platform functions properly and to deliver the best user experience for Malaysian players.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login authentication, session security, and language preference memory. These cookies cannot be disabled.
• Functional Cookies: Saving your preferences such as favourite game types and display settings for a more convenient experience on future visits.
• Analytics Cookies: Helping us understand how players use the platform – such as the most visited pages and time spent. This data is collected in aggregate form without identifying individuals.
• Security Cookies: Detecting and preventing fraudulent activity and suspicious login attempts.

OkeSlot does not use cross-site tracking cookies. We do not embed third-party advertising pixels on the platform for targeted advertising purposes.

9Child & Minor Player Protection

OkeSlot strictly prohibits the use of our platform by individuals under the age of 18. We take proactive measures to prevent minors from registering and accessing the platform:

• Age verification at registration via date of birth.
• A KYC process that verifies age through official identification documents.
• Immediate closure of any account found to belong to a minor.
• Refund of deposited funds to the legitimate parent or guardian if an underage account is identified.

OkeSlot does not knowingly collect personal data from individuals under the age of 18. If you believe your underage child has registered an OkeSlot account, please contact us immediately at support@okeslot.ws and we will take immediate action.

10Amendments to This Privacy Policy

OkeSlot reserves the right to amend this Privacy Policy from time to time to reflect changes in data management practices, legal requirements, or new platform features. When we make material changes, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending notifications to your registered email address at least 14 days before the changes take effect.
• Displaying a clear notice on the OkeSlot homepage and platform.

Your continued use of the OkeSlot platform after the effective date of any amendment constitutes acceptance of the revised policy. It is your responsibility to review this policy periodically. If you disagree with any amendment, you have the right to close your account and request data deletion before the changes take effect.

11Contact Our Data Protection Officer

For any questions, concerns, or requests regarding your privacy and personal data at OkeSlot, please contact our Data Protection Officer (DPO):

For formal complaints related to data protection that cannot be resolved by OkeSlot, you may submit a complaint to the Department of Personal Data Protection (JPDP) Malaysia through their official channels.