COMPLIANT WITH MALAYSIA PDPA 2010 • LAST UPDATED: 1 JUNE 2026

Winslot Privacy Policy – Malaysian Personal Data Protection

At winslot, your privacy is not merely a legal obligation – it is our priority. This policy clearly explains how we collect, use, protect, and manage your personal data as a member of our online casino platform in Malaysia.

This policy is effective from 1 June 2026. Any privacy inquiries may be directed to privacy@winslot-khelo.com
🔒
Winslot Data Security
Bank-grade data protection standards
SSL 256
Encryption Bits
0
Data Sales
24/7
Threat Monitoring
PDPA
Malaysia Compliant

Our Commitment to Your Privacy

Six core principles that form the foundation of winslot's Privacy Policy for all Malaysian members.

Bank-Grade Encryption

All your personal data and financial information is encrypted using 256-bit SSL protocol — the same standard used by Malaysia's leading banks such as Maybank and CIMB. No one can intercept or read your data during transmission.

No Sale of Personal Data

Winslot has never and will never sell, rent, or transfer your personal data to any third party for commercial purposes. Your data belongs to you – it is not our business commodity.

Malaysia PDPA 2010 Compliance

All our data collection and processing practices fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We conduct annual compliance audits to ensure the highest standards are consistently upheld.

Full Control in Your Hands

You have the right to access, correct, download, or request deletion of your personal data at any time. Requests are processed within 14 business days at no charge.

24/7 Threat Monitoring

Winslot's security systems monitor for unauthorised access attempts, cyberattacks, and suspicious activity around the clock. Our security team responds in under 30 minutes when a threat is detected.

Full Transparency

We are upfront about what data we collect, why we need it, how long we keep it, and who can access it. No hidden terms or misleading fine print.

Introduction & Scope of Privacy Policy
winslot's data protection fundamentals for Malaysian members

Winslot ("we", "our platform") take the privacy of your personal data very seriously. This Privacy Policy explains in detail how we collect, process, store, and protect your personal information when you use our online casino platform in Malaysia.

This policy applies to all users and members winslot, including visitors who browse our website without registering, those who sign up as members, and those who use any of the services, products, or promotions we offer. This covers all our casino games, slots, baccarat, live roulette, live matches, jackpots, and VIP programme.

We operate under and are fully compliant with Personal Data Protection Act 2010 (PDPA) Malaysia. In addition, our data protection practices incorporate internationally recognised best principles in data management, including fairness, transparency, purpose limitation, data minimisation, and security.

By using the winslot platform, you agree to the terms of this Privacy Policy. If you do not agree, please stop using the platform and contact us to request account deletion.

Types of Personal Data We Collect
Information collected during registration and platform usage

Winslot only collects data necessary to provide you with a high-quality service. The following are the categories of data we collect:

Data CategoryExample InformationHow We CollectRequired?
Personal IdentityFull name, date of birth, MyKad numberRegistration form, KYCYes
Contact InformationEmail address, phone number, home addressRegistration formYes
Financial DataBank account number, account holder nameDeposit/withdrawal processYes
Game DataBetting records, play sessions, winningsAutomated platform activityAuto
Technical DataIP address, browser type, operating systemAutomated system logsAuto
Communication DataCustomer support correspondenceLive chat, emailOptions

We not collect sensitive information such as biometric data, health information, or data relating to religious beliefs or political views.

How We Use Your Personal Data
Purposes for which winslot processes your data

Winslot processes your personal data only for legitimate and specific purposes. We do not process data for any other purpose without informing you in advance:

  • Account Management: Creating, maintaining, and securely managing your member account
  • Transaction Processing: Processing deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX Maybank2u / CIMB Clicks, as well as your withdrawal of winnings
  • Identity Verification (KYC): To verify that you meet the minimum age requirement of 21 and to prevent identity fraud
  • Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and platform abuse
  • Service Provision: Enables you to play slots, baccarat, roulette, live casino, and access the VIP programme
  • Customer Support: Responding to enquiries, resolving complaints, and providing technical support
  • Marketing Communications: Sending promotional information and exclusive offers (with your consent only)
  • Legal Compliance: Meeting Malaysia's regulatory reporting and legal compliance obligations

You may opt out of receiving marketing communications at any time by contacting winslot support or using the "unsubscribe" link in our emails.

Sharing of Data with Third Parties
Who can access your data and under what circumstances

Winslot does not sell or rent your personal data to any party. However, we may share data in the following very limited circumstances:

  • Payment Service Provider: Transaction information that must be shared with DuitNow, the FPX system, or e-wallet processors to complete your financial transactions
  • Game Software Provider: Minimum game session data required by casino software providers to deliver fair and functional gameplay
  • Regulatory Authority: When required by Malaysian law or a directive from a lawful authority
  • Audit Provider: Independent auditors who verify RNG fairness and our policy compliance – under strict confidentiality agreements
  • Fraud Prevention: If required to address fraud cases involving law enforcement

All third parties who receive your data are bound by strict confidentiality agreements and are required to use that data solely for the stated purposes. They are not permitted to process your data for their own purposes.

Winslot does not engage data brokers, third-party marketing companies, or advertising networks that track your behaviour across other websites.

Data Security Measures
Technical and organisational infrastructure to protect your data

Winslot invests significantly in a comprehensive data security infrastructure. The following protection measures are always active to safeguard your personal data:

  • 256-bit SSL/TLS Encryption for all data transmissions between your device and our servers
  • Data encryption at rest (at-rest encryption) for all data stored in our databases
  • Two-factor authentication (2FA) available to all member accounts
  • Intrusion detection system (IDS) that monitors network traffic 24/7
  • Role-based access control – winslot staff can only access data necessary for their specific role
  • Regular security audits by independent cybersecurity firms
  • Incident response plan comprehensive notification in the event of a data breach
  • Encrypted data backups in geographically separate data centres

In the event of a data breach affecting your information, winslot will notify you and the Department of Personal Data Protection Malaysia within 72 hours of becoming aware of it.

Data Retention Period
How long winslot retains your personal data

Winslot retains your personal data only for as long as necessary for the stated purposes or as required by Malaysian law. The following are our data retention guidelines:

  • Active Account Data: Retained for the lifetime of your account and 5 years after account closure (legal requirement)
  • Financial Transaction Records: 7 years as required by Malaysian tax legislation and compliance obligations
  • KYC Records: 5 years after the end of the business relationship, in accordance with anti-money laundering legal requirements
  • Game Logs: 5 years for audit and dispute resolution purposes
  • Support Communications: 3 years after case resolution
  • Cookie Data: From the current session (session cookies) up to a maximum of 1 year (preference cookies)

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered.

Your Rights Under PDPA 2010
Full control over your personal data

As a Malaysian citizen or resident, you have the following rights under the Personal Data Protection Act 2010 regarding the personal data we hold about you:

01
Right of Access

Request a copy of all personal data we hold about you in a readable format.

02
Right to Rectification

Request correction of any inaccurate, incomplete, or outdated information we hold about you.

03
Right to Erasure

Request deletion of your data when it is no longer needed or when you withdraw your consent.

04
Right to Data Portability

Receive your data in a structured, portable format that can be transferred to another service provider.

05
Right to Object

Object to the processing of your data for direct marketing purposes at any time.

06
Right to Restrict Processing

Request restriction of your data processing under certain circumstances as defined by the PDPA.

To exercise any of the above rights, submit a written request to privacy@winslot-khelo.com. We will process your request within 14 business days at no charge.

Cookies & Tracking Technologies
How winslot uses cookies to enhance your experience

Winslot uses cookies and similar tracking technologies to enhance your gaming experience. Cookies are small text files stored on your device. The following are the types of cookies we use:

Your Cookie Settings
Financial Data & KYC Process
Protection of financial information and identity verification

Your financial information is protected at the highest level on our platform winslot. When you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX internet banking, all data transmissions are fully encrypted and we do not store your full card details or e-wallet passwords.

  • Bank account numbers are stored in encrypted format and used solely to process withdrawals to your own account
  • KYC documents (MyKad, bank statements) are stored on separate servers with strictly limited access
  • Only specially authorised personnel may access KYC documents, and every access is logged for audit purposes
  • KYC documents are not shared with game service providers – only the verification outcome (pass/fail) is shared

Winslot will never ask for your full credit card details or internet banking password. If anyone claims to be a winslot representative and requests this information, please report it to us immediately.

Protection of Children & Minors
winslot's commitment to minor protection

Winslot strictly prohibits the use of the platform by individuals under the age of 21. Our platform not for children or minors. We take the following proactive steps to prevent access by those under age:

  • Mandatory age verification at registration
  • KYC process requiring official identification documents
  • A detection system that flags accounts showing signs of use by a minor
  • Immediate account closure upon confirmed ownership by a minor

We do not knowingly collect personal data from minors. If you believe we have inadvertently received personal data from a child, please contact us immediately and we will take prompt action to delete it.

Changes to This Privacy Policy
How we notify you of updates

Winslot may update this Privacy Policy from time to time in response to changes in law, business requirements, or to improve our transparency. When we make material changes:

  • We will update the "Last Updated" date at the top of this document
  • We will send email notifications to all registered winslot members
  • We will display a clear notice on the platform's main page for a minimum of 30 days
  • For highly significant changes, we may ask for your consent again

Continued use of the winslot platform after notice has been given will be considered acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account.

Contact Our Data Protection Officer
How to contact us for privacy inquiries

If you have any questions, concerns, or wish to exercise your rights under PDPA 2010, please contact the winslot Data Protection Officer (DPO):

privacy@winslot-khelo.com
24/7 Live Chat on the winslot platform
Winslot Sdn. Bhd., Klang Valley, Malaysia

We are committed to responding to all privacy-related enquiries within 3 business days and fulfil formal requests within 14 business days. If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP).

Your privacy is our priority. Winslot is committed to operating with full transparency, accountability, and respect for the privacy rights of every member across Malaysia.

Your Data is Safe with Winslot – Play with Confidence

Over 500,000 Malaysian members have trusted winslot with their personal data. Register today with confidence – your privacy is protected by 256-bit SSL encryption and is fully compliant with Malaysia's PDPA 2010.

256-bit SSL Encrypted PDPA 2010 Compliant No Data Selling Full Control in Your Hands
Bahasa Melayu