PG Slot Privacy Policy – Personal Data Protection for Malaysian Players

1Introduction & Scope of This Privacy Policy

PG Slot recognises that player trust is the foundation of our operations. That trust is not just about fair gameplay or payment speed – it is also about how we handle the personal information you entrust to us when you register and use this platform.

This Privacy Policy applies to all individuals who use the PG Slot platform on pgslot-khelo.net — including unregistered visitors, registered members, and former members whose accounts have been closed. It covers all personal data collected through our platform, email communications, support chat, and any other interactions between you and PG Slot.

As an entity operating in Malaysia and serving Malaysian players, PG Slot complies with the Personal Data Protection Act 2010 (PDPA) – Malaysia's primary legislation governing the processing of personal data in commercial transactions. We regard PDPA compliance as a minimum obligation, not a maximum standard – in many respects, we strive to go beyond what the law requires in our effort to protect our players' privacy.

If you have any questions about this Privacy Policy or how we handle your data, please contact us at support@pgslot-khelo.net. Our team will respond within 2 business days.

2Personal Data We Collect

PG Slot collects personal data across several categories depending on how you interact with the platform. Below is a detailed breakdown of the types of data we collect and how it is collected:

Account Registration Data:

• Full name as stated on your official Malaysian identification document (MyKad or passport)
• An active Malaysian phone number – used for OTP verification and account communications
• A valid email address for platform communications
• Date of birth – for age eligibility verification (18 years and above)
• Password (stored in encrypted form — we cannot read your password)

Identity Verification Data (KYC):

• A valid copy of your Malaysian MyKad or passport
• Proof of payment method (screenshot of your e-wallet or banking account in your name)
• In certain cases, proof of current residential address

Financial Transaction Data:

• Records of all deposits made, including amount, time, payment method (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, CIMB Clicks), and reference number
• Records of all withdrawals including amount, time, payment method, and processing status
• Current account balance and balance change history

Game Activity Data:

• Game history including game type, date and time, bet amounts, and outcomes
• Records of bonuses claimed and redemption status
• VIP Points records and VIP tier history
• Live casino game sessions (video recordings retained for a limited period)

Technical Data:

• IP address of the device used to access the platform
• Browser or application type and version
• Device information (model, operating system)
• Login and logout times, along with session history
• Cookie data and tracking technologies described in Section 7

3How & Why We Use Your Personal Data

PG Slot uses your personal data for legitimate purposes only. Below is a detailed explanation of each purpose and the legal basis that permits it:

Account Management & Services (Contractual Necessity):

• Creating, verifying, and managing your player account
• Processing deposits and withdrawals securely and accurately
• Crediting bonuses, VIP cashback, and loyalty programme rewards
• Providing responsive and effective customer support
• Resolving disputes and complaints related to accounts or transactions

Security & Fraud Prevention (Legitimate Interest):

• Identifying and preventing fraud, money laundering, and other illegal activities
• Verifying player identity to ensure compliance with KYC requirements
• Detecting suspicious activity patterns to protect the platform and other players
• Maintaining the overall security and integrity of the PG Slot platform

Legal Compliance (Legal Obligation):

• Complying with anti-money laundering (AML) requirements and know your customer (KYC) obligations
• Maintaining records for audit requirements and authority investigations where necessary
• Complying with court orders or lawful requests from competent authorities

Platform Improvement (Legitimate Interest):

• Analysing usage patterns to better understand the needs and preferences of Malaysian players
• Testing and developing new features relevant to our player community
• Optimising platform performance, including load times and mobile experience

Marketing Communications (With Your Consent):

• Sending information about relevant promotions, bonuses, and new offers
• Informing you about new games or platform features that may interest you
• Sending invitations to exclusive tournaments and events for VIP members

You may withdraw your consent to marketing communications at any time through the notification settings in your account or by contacting our support team. Withdrawing consent for marketing does not affect your eligibility to receive necessary service communications related to your account.

4Data Sharing with Third Parties

PG Slot states this clearly – we never sell, rent, or trade your personal data to any third party for their marketing purposes. This is a non-negotiable principle we stand firmly by.

That said, in the course of platform operations, there are specific situations where your data may need to be shared with carefully selected third parties:

Trusted Service Providers:

• Payment providers – Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks to process your financial transactions
• Cloud service provider – for secure data storage with strict security standards
• Game software providers – session data required for games to run properly
• Identity verification companies – for KYC processes required by regulatory obligations

All third-party service providers we engage are required to sign data protection agreements that prohibit them from using your data for any purpose other than what PG Slot has mandated. They are also required to maintain security standards equal to or higher than those of PG Slot itself.

Authorities & Law Enforcement:

PG Slot may be required to disclose personal data to the relevant authorities where mandated by Malaysian law, court order, or in the context of a legitimate official investigation. In such situations, we will disclose only the minimum data necessary and, where permitted by law, will notify you of such disclosure.

Business Transfer:

If PG Slot is involved in a merger, acquisition, or material asset sale, players' personal data may be transferred as part of that transaction. In such circumstances, we will ensure that the receiving party is bound by comparable data protection obligations and will notify players in advance.

5Data Security – How We Protect Your Information

PG Slot takes the security of our players' personal data seriously. Below are the technical and organisational measures we use to protect your data:

Technical Measures:

• 256-bit SSL/TLS Encryption – all data transmitted between your device and PG Slot's servers is protected using industry-standard encryption protocols. You can verify this by checking the padlock icon in your browser's address bar when visiting our platform
• End-to-end data encryption – sensitive data stored on our servers, including payment information and identity documents, is encrypted using robust encryption standards
• Role-based access control – PG Slot staff may only access data relevant to their specific job functions. VIP managers cannot view security technical data, and vice versa
• Two-factor authentication – staff access to internal systems containing player data requires two-factor authentication, without exception
• 24/7 security monitoring – automated monitoring systems detect and alert on any unusual activity or unauthorised access attempts in real time
• Regular security testing – independent cybersecurity auditors conduct penetration testing and vulnerability assessments on a quarterly basis

Organisational Measures:

• Mandatory privacy awareness and data security training for all staff
• Strict confidentiality policy for all staff with access to player data
• A clear incident response procedure for any potential data breach scenarios
• Data protection impact assessments for all new projects involving the processing of personal data

6Personal Data Retention Period

PG Slot does not retain your personal data for longer than is necessary for the purposes set out in this Privacy Policy, or to meet applicable legal requirements. The following are the data retention guidelines we apply:

Once the relevant retention period has ended, data will be securely deleted or anonymised using methods that ensure it can no longer be linked back to you personally. Anonymised data may be retained for statistical analysis and platform improvement purposes.

7Cookies & Tracking Technologies

The PG Slot platform uses cookies and related tracking technologies to enhance the user experience and ensure the platform functions correctly. Below is an explanation of the types of cookies we use:

Required Cookies (Cannot Be Disabled):

• Session cookies – keeps you logged in during an active session so you don't need to sign in again each time you navigate between pages
• Security cookies – used to detect suspicious activity and protect your account from unauthorised access
• Essential preference cookies – stores your language settings and basic display preferences

Functional Cookies (Enabled by Default, Can Be Disabled):

• Game preference cookies – remembering your favourite games and personalised settings
• Account balance cookies – helps display your balance and account information more quickly

Analytical Cookies (With Your Consent):

• Used to understand how players use the platform for improvement purposes
• Data is collected in aggregate and anonymised – not linked to your personal identity

You can manage your cookie settings through your browser at any time. Please note that disabling essential cookies may affect core platform functions, including the ability to log in and play securely.

8Your Rights as a Data Subject under PDPA

Under the Malaysian Personal Data Protection Act (PDPA) 2010 and PG Slot's privacy policy, you have the following rights regarding your personal data:

• Right to access — you may request a copy of the personal data we hold about you at any time. Requests will be processed within 21 business days and may be subject to a reasonable administrative fee
• Right to rectification – if your personal data is inaccurate or incomplete, you have the right to request a correction. Amendments will be carried out within 14 business days of request confirmation
• Right to erasure – in certain circumstances (for example, when data is no longer needed for its original purpose or when you withdraw your consent), you may request deletion of your data. This right does not apply to data that must be retained to fulfil legal obligations
• Right to object to processing – you may object to the processing of your personal data for direct marketing purposes at any time, and for other purposes based on legitimate interest in certain circumstances
• Right to withdraw consent – for processing based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the validity of processing carried out prior to withdrawal

To exercise any of the rights above, please contact our team by emailing support@pgslot-khelo.net with the subject line "Personal Data Rights Request", along with your full name, account number, and a specific description of your request. We may require identity verification before processing your request in order to protect the security of your account.

9Children's Data Protection

The PG Slot platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data of children under the age of 18.

All prospective members are required to confirm they are at least 18 years of age upon registration. Additional age verification is carried out during the KYC (identity verification) process, which is mandatory for all first-time withdrawals. PG Slot uses document-based age checks with official Malaysian identification as an added layer of protection.

If we discover that we have collected personal data belonging to an individual under the age of 18, we will take immediate steps to delete that data, close the account in question, and process a refund of the original deposit to the verified parent or guardian.

If you are a parent or guardian who believes your child under the age of 18 has registered on our platform, please contact us immediately at support@pgslot-khelo.net with relevant details for immediate action.

10Cross-Border Data Transfers

In the course of our operations, your personal data may be stored or processed on servers located outside Malaysia. This occurs in the context of cloud services and technology infrastructure used to run the PG Slot platform.

When your personal data is transferred or processed outside Malaysia, PG Slot ensures that protection equivalent to Malaysia's PDPA is maintained through the following measures:

• Data processing agreements with cloud service providers requiring strict data protection standards
• Use of recognised data transfer mechanisms such as standard contractual clauses
• Periodic assessments of service providers' compliance with their data protection obligations

PG Slot does not transfer players' personal data to countries without adequate privacy protections unless appropriate additional safeguards are in place.

11Changes to This Privacy Policy

PG Slot reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or how the platform operates. The latest version of the Privacy Policy will always be available on this page with a clear update date.

For material changes — that is, changes that significantly affect how we use your data or your rights — we will provide advance notice via:

• A clear notification on the platform's main page when you log in
• An email to the address registered to your account at least 14 days before the changes take effect
• Updates to this page with a revised update date

Continued use of the PG Slot platform after a change's effective date will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the option to close your account before they take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we manage your personal data.

12How to Contact Us for Privacy Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, we encourage you to reach out to us directly. Our team is available to assist in Bahasa Melayu.

You can reach us through the following channels:

• Privacy Email: support@pgslot-khelo.net – use the subject line "Privacy Policy Enquiry" or "Data Rights Request"
• Live Chat: Available on the platform 24 hours a day – ideal for general privacy enquiries
• Response Time: All privacy and data enquiries will receive a response within 2 business days

For formal requests relating to personal data rights — such as access, rectification, or erasure — please use email and include the following: your full name, PG Slot account number, the type of request being made, and any relevant additional information. We may require identity verification before processing your request to safeguard your data security.