Slot gratis Privacy Policy – Personal Data Protection for Malaysia Players

This Privacy Policy explains how slot gratis ("we", "Platform") collects, uses, discloses, and protects your personal information when you access or use our platform — whether through the website at slotgratis.vu or via our mobile app for Android and iOS.

By registering an account or continuing to use the slot gratis platform, you consent to the processing of your personal data as described in this Privacy Policy. This Policy should be read together with Terms and Conditions us.

Slot gratis is committed to complying with applicable data protection laws, including Malaysia's Personal Data Protection Act 2010 (PDPA). We view your privacy as more than a compliance requirement — it is part of the trust you place in us, and we take that trust seriously.

We collect two main categories of data: information you provide directly to us, and information collected automatically when you use the platform.

Data you provide directly:

• Account registration information — full name, email address, mobile phone number, and date of birth.
• Identity verification documents (KYC) — copies of MyKad, passport, or other accepted identification documents.
• Financial information — bank account holder name, bank account number, or digital wallet details for deposit and withdrawal purposes.
• Information you provide when contacting our customer support team.

Data collected automatically:

• Log and usage data — IP address, browser type, operating system, pages visited, and session duration.
• Device data — device identifier, app version, and mobile operating system information.
• Cookie data and similar tracking technologies — for the purposes described in Section 6 below.
• Approximate geolocation data — to determine the access region and comply with regional operating restrictions.

The personal data we collect is used solely for legitimate and stated purposes. Below is a summary table explaining each data type and its intended use:

We will not use your data for any purpose beyond what is stated above without first obtaining your additional consent.

Slot gratis does not sell your personal data to any third party. However, there are certain situations where we need to share data with selected parties to enable us to operate our services effectively:

• Payment service providers: Payment gateways that process your deposits and withdrawals require access to the financial information needed to complete transactions. These providers are required to protect your data in accordance with PCI DSS standards.
• Game providers: Third-party game providers (such as Pragmatic Play, Evolution Gaming, and others) that integrate games into our platform may receive game session information required to run the games properly.
• Identity verification services: Third-party KYC service providers that assist us in verifying user identities in accordance with AML compliance requirements.
• Competent authorities: When required by law, court order, or direction from a legitimate regulatory authority.

All third parties we share data with are bound by data processing agreements that require them to protect your data and use it only for specified purposes.

Protecting your data is a technical and operational responsibility we take very seriously. The slot gratis platform implements multiple layers of security to keep your data protected at all times:

• Encryption in transit: All communications between your device and our servers are protected with SSL/TLS 256-bit encryption. You can verify this by checking the padlock icon in your browser's address bar.
• Encryption of stored data: Sensitive data such as bank account numbers, KYC information, and passwords are not stored in plain text. Passwords are hashed using strong hashing algorithms and cannot be recovered even by our own staff.
• Internal access controls: Only staff who require access to specific data to perform their duties are permitted to do so, in accordance with the least privilege principle.
• Continuous monitoring: Our security monitoring system operates 24/7 to detect suspicious activity or unauthorized access attempts to our database.
• Regular security audits: We conduct regular security audits and penetration testing to identify and address potential vulnerabilities before they can be exploited.

Despite all these security measures, no system can guarantee absolute security. In the event of a data breach affecting your data, we will notify you within 72 hours of the breach being detected, in line with industry best practices.

The slot gratis platform uses cookies and similar technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collects anonymous information about how users interact with the platform — most visited pages, page load times, and errors encountered. This data helps us improve the platform.
• Functional cookies: Saves your preferences such as language, preferred text size, and other settings to deliver a more personalised experience.

You can manage cookie settings through your browser at any time. However, disabling essential cookies may cause some platform features to stop working correctly.

Slot gratis retains your personal data only for as long as necessary to fulfill the purposes stated in this Privacy Policy or to comply with applicable legal requirements. The following are our general data retention guidelines:

• Active account data: Retained for the duration of your active account and for the required period after account closure to meet legal obligations (typically 5–7 years).
• Financial transaction records: Retained for a minimum of 7 years in line with Malaysia's accounting and anti-money laundering legal requirements.
• KYC documents: Retained for the duration of the active account plus 5 years, or longer if required by regulatory authorities.
• System and security logs: Typically retained for 12 months before being securely deleted.
• Support communication data: Retained for 3 years for historical reference and quality training purposes.

When data is no longer needed, it is deleted or anonymised using procedures that ensure it cannot be recovered.

Under applicable data protection laws, you have the following rights regarding the personal data we hold. To exercise any of these rights, contact our customer support team: