Slot77 Privacy Policy

This Privacy Policy ("Policy") governs the collection, use, storage, disclosure, and protection of personal data by Slot77 ("we", "us", "our", "Platform") in connection with the website located at slot77.buzz and all associated services, products, and communication channels made available to registered Members and visitors.

Slot77 is an online gaming and sports betting platform providing casino games, live dealer tables, sports wagering (including Liga Super Malaysia, English Premier League, UFC, and esports), lottery, and related entertainment services to eligible adults in Malaysia and other permitted territories. In delivering these services, Slot77 necessarily collects and processes certain personal information about the individuals who interact with the platform.

We take our data protection obligations seriously. This Policy explains what data we collect, why we collect it, how long we keep it, with whom we may share it, and what rights you hold over your own personal information. It should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference.

This Policy was last updated on 1 January 2026. Slot77 reserves the right to amend this Policy at any time. Continued use of the platform after any material amendment constitutes your acceptance of the revised Policy.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, email address, payment details, location data, and online identifiers.
• "Data Controller" means Slot77, the entity that determines the purposes and means of processing personal data collected through the platform.
• "Data Processor" means any third party that processes personal data on behalf of Slot77 under a contractual arrangement.
• "Member" means any individual who has registered a Slot77 account and is subject to these terms.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.
• "KYC" means Know Your Customer — identity and age verification procedures used to confirm a Member's identity, age eligibility (21+), and source of funds.
• "Cookies" means small text files placed on a user's device by the Slot77 platform for session management, performance analytics, and functionality purposes.

Slot77 collects personal data across several categories depending on how you interact with the platform:

Slot77 does not collect sensitive personal data such as racial origin, religious beliefs, biometric identifiers, or medical history, except where specifically required by applicable regulatory guidance and with your explicit consent.

Slot77 collects personal data through the following channels:

• Direct submission: Information you actively provide during account registration, KYC document uploads, deposit and withdrawal requests, live chat sessions, and email or support-ticket correspondence.
• Automated technical collection: Device and session data gathered automatically through server logs, cookies, and similar web technologies when you access or navigate the Slot77 platform.
• Payment processors: Confirmation data returned by integrated Malaysian payment platforms — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX (Maybank, CIMB, Public Bank, Hong Leong Bank), and USDT TRC20 blockchain networks — following a deposit or withdrawal transaction.
• Third-party verification services: Identity and fraud-check data returned by KYC and anti-money-laundering (AML) screening partners during the account verification process.
• Public sources: Publicly available information consulted to verify identity or assess fraud and compliance risk where required.

Slot77 processes personal data only for defined, legitimate purposes. The principal purposes and their respective legal bases are as follows:

• Account management and service delivery: Processing necessary to perform the contract between Slot77 and the Member, including account creation, gameplay, deposits, withdrawals, and customer support.
• Identity and age verification (KYC): Processing necessary for compliance with applicable legal obligations, including confirming that Members are at least 21 years of age and have not been registered as self-excluded.
• Anti-money-laundering (AML) and fraud prevention: Processing necessary for compliance with regulatory obligations and legitimate security interests.
• Responsible gambling monitoring: Processing in the legitimate interest of player safety, including detection of patterns that may indicate problematic gambling behaviour and administration of self-exclusion requests.
• Platform security and abuse prevention: Processing in Slot77's legitimate interest to protect the platform against fraud, multi-accounting, and abuse.
• Service communications: Transactional communications (account alerts, payment confirmations, security notices) necessary to perform the contract.
• Marketing communications: Only where you have given explicit consent. You may withdraw marketing consent at any time via your account settings.
• Analytics and platform improvement: Aggregated and anonymised usage data processed in Slot77's legitimate interest to improve performance and user experience.

All personal data processed by Slot77 is handled in accordance with the principles of data minimisation, purpose limitation, accuracy, and integrity. We process only the data that is reasonably necessary for the specific purpose identified and do not subject personal data to further incompatible processing.

Financial transaction data — including deposit confirmations from Touch 'n Go eWallet, DuitNow, FPX transfers from Maybank, CIMB, Public Bank, and Hong Leong Bank, GrabPay, Boost, and USDT TRC20 on-chain records — is processed to verify funding, detect suspicious activity, and comply with AML obligations. Full payment account numbers are neither stored nor displayed within the Slot77 system; only tokenised or partial references are retained.

Gaming activity data — including bet history, session logs, win/loss records, and bonus participation — is retained for regulatory compliance, dispute resolution, and responsible gambling monitoring. This data is not sold to third-party marketers.

Slot77 does not sell, rent, or trade personal data to any external organisation for marketing or commercial purposes. We may share personal data with third parties only in the following limited circumstances:

• Service providers and Data Processors: Technology partners, payment processors, KYC and identity verification vendors, game content providers, and customer support platform operators engaged by Slot77 under contractual data processing agreements. These parties are authorised to process data only on Slot77's instructions and may not use Member data for their own purposes.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory directive, Slot77 will disclose personal data to competent authorities. We will inform affected Members where legally permitted to do so.
• Fraud and AML screening networks: Where necessary to prevent financial crime, identity fraud, or coordinated platform abuse, limited data may be shared with approved screening services.
• Business transfers: In the event of a merger, acquisition, or transfer of Slot77's business or assets, Member personal data may form part of the transferred assets. Affected Members will be notified in advance where reasonably practicable.

In all cases where data is shared, Slot77 applies appropriate contractual, technical, and organisational safeguards to protect Member information.

Due to the international nature of online gaming infrastructure, some personal data processed by Slot77 may be transferred to, stored on, or accessed by systems and personnel located outside Malaysia. Where such transfers occur, Slot77 takes steps to ensure that an adequate level of data protection is maintained, including through contractual safeguards with receiving parties.

Members in Malaysia should be aware that data protection laws in some destination countries may differ from those applicable locally. Slot77 mitigates this risk through strict vendor contractual obligations and regular review of third-party data handling practices.

Slot77 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of account activity and for a minimum of five (5) years following account closure to satisfy AML and regulatory audit requirements.
• Financial transaction records: Retained for a minimum of five (5) years in accordance with financial record-keeping obligations.
• Gaming session and wagering data: Retained for up to three (3) years for responsible gambling monitoring and dispute resolution purposes.
• Customer support communications: Retained for up to two (2) years to assist with ongoing enquiries and quality review.
• Technical and device logs: Retained for up to twelve (12) months for platform security and fraud monitoring purposes.
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter as evidence of prior consent.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised. Anonymised aggregate data may be retained indefinitely for analytical purposes.

Slot77 uses cookies and similar tracking technologies to operate the platform effectively, remember session preferences, and gather aggregate analytics data. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Essential for platform operation, including session authentication and security tokens. These cannot be disabled without impairing core functionality.
• Functional Cookies: Store user preferences such as language settings, display configuration, and responsible gambling tool elections between sessions.
• Analytics Cookies: Collect anonymised data on page visits, navigation paths, and feature usage to help Slot77 improve platform performance. No personally identifiable information is included in analytics data.
• Security Cookies: Assist in fraud detection, bot identification, and unusual session-activity monitoring.

Non-essential cookies are activated only with your consent, which may be provided or withdrawn at any time via your browser settings. Disabling functional or analytics cookies will not prevent access to Slot77 but may affect certain convenience features.

Subject to applicable law and verification of your identity, you have the following rights in respect of personal data that Slot77 holds about you:

• Right of Access: You may request a copy of the personal data Slot77 holds about you, along with information about how it is processed.
• Right to Rectification: Where personal data held is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal or regulatory retention obligations.
• Right to Restriction of Processing: You may request that Slot77 restricts processing of your data in certain defined circumstances, such as where you contest its accuracy.
• Right to Data Portability: Where processing is based on consent or contract, you may request that we provide your data in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing activities. Marketing opt-outs take effect promptly upon request.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the Slot77 support team (see Section 16). We will respond to verified requests within thirty (30) calendar days. In complex cases, we may extend this period by a further sixty (60) days with prior notification.

The Slot77 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, store, or process personal data from persons under the age of 21. If Slot77 discovers or has reasonable grounds to believe that a Member is under 21, the account will be immediately suspended, pending-balance activity halted, and the relevant personal data reviewed in accordance with regulatory obligations.

Parents and guardians who believe that their child may have accessed or registered on the Slot77 platform are encouraged to contact our support team immediately so that the matter can be investigated and resolved promptly.

Slot77 employs a layered security architecture to protect personal data against unauthorised access, loss, alteration, or disclosure. Key technical and organisational measures include:

• AES-256 encryption for data stored at rest on Slot77 infrastructure.
• TLS 1.3 encryption for all data transmitted between the user's browser or device and Slot77 servers.
• Two-factor authentication (2FA) available to all Members for account login.
• Role-based access controls restricting staff access to personal data on a need-to-know basis.
• Regular internal security reviews and periodic third-party penetration testing.
• Tokenisation of payment data — full financial account numbers are never stored on Slot77 systems.
• Automated anomaly detection to flag unusual account activity and potential fraud indicators in real time.

Despite these measures, no digital platform can guarantee absolute security. In the event of a data breach that poses a significant risk to affected Members, Slot77 will notify impacted individuals and relevant authorities within the timeframe required by applicable law.

The Slot77 platform may reference or integrate with third-party services such as payment gateways (Touch 'n Go eWallet, DuitNow, Maybank FPX, CIMB, Public Bank, Hong Leong, Boost, GrabPay), identity verification providers, and game content suppliers. While Slot77 selects service providers carefully and imposes contractual data protection obligations, each third-party service operates under its own independent privacy policy.

Slot77 is not responsible for the privacy practices of third-party services and recommends that Members review the relevant privacy documentation for any external platform they interact with during the course of using Slot77.

Slot77 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform features, or data processing practices. When material changes are made, we will publish the revised Policy on this page with an updated effective date and, where appropriate, notify registered Members via email or prominent on-platform notice at least seven (7) days before the changes take effect.

We encourage Members to review this page periodically. Your continued use of the Slot77 platform following any update constitutes acceptance of the revised Privacy Policy. If you do not accept the changes, please discontinue use of the platform and contact support to request account closure.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data Slot77 holds about you, please contact our support and data team through the following channels:

• Email: [email protected] — plain text only, not a clickable link
• Live Chat: Available 24 hours a day, 7 days a week, directly through the Slot77 platform. Average first response time under 90 seconds.
• Coverage: Our support team serves players across Malaysia including Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and surrounding areas.

All data rights requests submitted via email must include sufficient identifying information for us to verify your identity before processing. We will acknowledge all formal data requests within 48 hours and provide a substantive response within 30 calendar days.

For further information about your account terms and platform rules, please also review our Terms & Conditions. For responsible gambling support and self-exclusion tools, please visit our Responsible Gambling page.