Privacy Policy

01Introduction

DMSlot ("we", "us", "the Platform", "DMSlot") is committed to protecting the privacy and personal data of all users who access and interact with our online gaming and sports betting services at dmslot.cam. This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed, stored, and used by DMSlot.

This Policy applies to all data subjects who register an account, visit the Platform as a guest, interact with our customer support team, or otherwise engage with DMSlot's services. By accessing or using the Platform, you acknowledge that you have read and understood this Policy and that you consent to the data processing activities described herein, to the extent that such consent is required by applicable law.

This Policy should be read in conjunction with DMSlot's Terms & Conditions and Responsible Gambling Policy, both of which form part of the overall agreement between you and DMSlot.

02Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, financial information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, or deletion.
• "Data Controller" means DMSlot, as the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of DMSlot under a written data processing agreement.
• "Data Subject" means any natural person whose Personal Data is processed by DMSlot — including registered Players, prospective users, and visitor users.
• "KYC Data" means documentation and information collected as part of the Know Your Customer identity verification process, including government-issued identification and proof of address.
• "Cookies" means small data files placed on your device by the Platform for functionality, session management, and analytics purposes.
• "Sensitive Data" means a special category of personal data that requires a higher standard of protection, including health information, biometric data, or information that could be used to infer a data subject's problem gambling status.

03Data We Collect

DMSlot collects the following categories of personal data from users, depending on the nature of your interaction with the Platform:

3.1 Registration & Account Data

• Full legal name
• Date of birth
• Email address
• Mobile phone number
• Residential address (city, state, postcode — e.g., Kuala Lumpur, Petaling Jaya, Penang)
• Username and encrypted password hash
• Account preferences and communication settings

3.2 KYC Verification Data

• Malaysian National Identity Card (MyKad) details — front and back
• Passport photo page (for non-MyKad holders)
• Proof of address documents (utility bills or bank statements dated within 3 months)
• Selfie or liveness verification image (where required for enhanced due diligence)

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records
• Payment method identifiers (wallet IDs, bank account last four digits — not full card numbers)
• Transaction amounts, timestamps, and reference numbers
• Currency and conversion data where applicable

3.4 Gameplay & Behavioural Data

• Game session records, bet histories, and win/loss data
• Sports betting selections and market preferences
• Bonus activations and wagering activity
• Session duration and frequency patterns (used for responsible gambling monitoring)

3.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Referral source and UTM parameters
• Page interaction data collected via analytics tools

3.6 Support & Communication Data

• Live chat transcripts and email correspondence
• Complaint records and resolution notes
• Survey responses and feedback submissions

04How Data is Collected

DMSlot collects personal data through the following channels and mechanisms:

05How We Use Your Data

DMSlot processes your personal data for the following specific and legitimate purposes:

• Account management: creating, maintaining, and securing your Player Account;
• Service delivery: providing access to games, sports betting markets, live dealer tables, and promotional offers;
• Financial transactions: processing deposits and withdrawals through your chosen Malaysian payment method;
• Identity verification: conducting KYC checks as required under applicable anti-money laundering and counter-terrorism financing obligations;
• Fraud prevention & security: detecting and investigating suspicious activity, unauthorised access, and potential breaches of our Terms & Conditions;
• Responsible gambling monitoring: identifying patterns of play that may indicate problem gambling and initiating appropriate welfare interventions;
• Customer support: responding to queries, complaints, and formal correspondence;
• Legal compliance: meeting obligations imposed by applicable laws and regulatory requirements;
• Platform improvement: using aggregated and anonymised analytics data to improve user experience, game performance, and platform stability;
• Promotional communications: sending account-related updates and, where you have opted in, promotional offers tailored to your gameplay preferences.

06Legal Basis for Processing

DMSlot processes personal data on one or more of the following legal grounds, as applicable to each processing activity:

Where processing is based on consent, you retain the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

07Data Sharing & Third-Party Disclosure

DMSlot does not sell, rent, or otherwise commercially exploit your personal data to third parties. We may, however, share your data with the following categories of recipients where necessary and lawful:

7.1 Service Providers & Data Processors

DMSlot engages certain third-party service providers who process data on our behalf under contractual data processing agreements that require them to protect your data in accordance with applicable standards. These include:

• Payment processing partners (Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, DuitNow, FPX, and cryptocurrency processing providers);
• Identity verification and KYC service providers;
• Cloud infrastructure and data hosting providers;
• Fraud detection and cybersecurity service providers;
• Customer support platform operators.

7.2 Game & Content Providers

Game suppliers integrated with the DMSlot platform may receive limited gameplay and session data as required for the proper functioning of their games and the calculation of RTP statistics. These providers operate under their own privacy and data security standards.

7.3 Legal & Regulatory Authorities

DMSlot may be required to disclose personal data to competent authorities, law enforcement agencies, courts, or regulatory bodies where required by applicable law, court order, or regulatory direction. We will notify you of any such disclosure where we are legally permitted to do so.

7.4 Corporate Transactions

In the event of a merger, acquisition, or sale of all or part of DMSlot's business, personal data held by DMSlot may be transferred to the acquiring entity as part of the transaction, subject to equivalent data protection obligations being imposed on the recipient.

08Payments & KYC Data Handling

Given the financial nature of the DMSlot platform, payment and identity verification data is treated with an elevated level of care and access control.

8.1 Payment Card & Wallet Data

DMSlot does not store full payment card numbers, CVV codes, or complete e-wallet authentication credentials on its servers. All payment processing is handled by certified third-party payment gateways. DMSlot retains only transaction reference numbers, masked identifiers (e.g., last four digits of a bank account), timestamps, and transaction amounts for record-keeping and dispute resolution purposes.

8.2 KYC Documentation

KYC documents submitted for identity verification — including copies of MyKad, passport, and proof of address — are stored in encrypted form and accessible only to authorised compliance personnel. These documents are not used for any purpose beyond identity verification and regulatory compliance.

KYC data is retained for the duration of your active Account and for a minimum period thereafter as required by applicable anti-money laundering regulations. Upon Account closure and expiry of the applicable retention period, KYC documents are securely deleted from DMSlot's systems.

09Cookies & Tracking Technologies

DMSlot uses cookies and similar tracking technologies on the Platform for the following purposes:

DMSlot does not deploy third-party advertising cookies or cross-site tracking technologies for behavioural advertising purposes. You may manage cookie preferences through your browser settings, though disabling essential cookies may affect Platform functionality.

10Data Retention

DMSlot retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account data: retained for the duration of your active Account and for a minimum of 5 years following Account closure, in accordance with applicable regulatory requirements;
• KYC documentation: retained for a minimum of 5 years following Account closure or the last transaction, consistent with anti-money laundering obligations;
• Transaction records: retained for a minimum of 5 years from the date of the transaction;
• Customer support records: retained for 3 years following resolution of the relevant query or complaint;
• Analytics data: anonymised aggregate data may be retained indefinitely; individually identifiable analytics data is deleted or anonymised after 26 months;
• Marketing consent records: retained for the duration of the active consent and for 1 year following withdrawal, as evidence of the consent given.

Upon expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymised.

11Data Security Measures

DMSlot implements a multi-layered approach to data security, encompassing technical, organisational, and procedural safeguards designed to protect personal data against unauthorised access, loss, alteration, or disclosure. Key measures include:

• Transport layer security: all data transmitted between your device and DMSlot servers is encrypted using TLS 1.2 or higher;
• Data-at-rest encryption: sensitive personal and financial data stored in our databases is encrypted using AES-256 or equivalent standards;
• Access controls: access to personal data is restricted on a strict need-to-know basis, with role-based permissions and multi-factor authentication required for all staff with data access;
• Network security: DMSlot employs firewalls, intrusion detection systems, and DDoS mitigation services to protect platform infrastructure;
• Third-party audits: security controls are subject to periodic independent review and penetration testing;
• Staff training: all personnel with access to personal data receive regular training on data protection obligations and security practices.

12Your Rights as a Data Subject

Subject to applicable law, you have the following rights with respect to your personal data held by DMSlot. To exercise any of these rights, please contact us using the details provided in Section 16 of this Policy.

DMSlot will respond to all substantiated data rights requests within 14 business days. Where a request is complex or numerous, we may extend this period by a further 14 business days, subject to notification. We reserve the right to request proof of identity before processing any data rights request.

13Minors & Age Restriction

The DMSlot platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect or process personal data from individuals under this age. Any person under 21 years of age is prohibited from registering or using DMSlot's services.

If DMSlot becomes aware that personal data has been collected from a person under the age of 21 without appropriate consent, that Account will be immediately suspended, all associated data will be deleted as soon as practicable, and any funds held in the Account will be dealt with in accordance with our Responsible Gambling Policy.

If you are a parent or guardian and believe that a person under 21 in your care has registered with DMSlot, please contact us immediately at [email protected].

14International Data Transfers

DMSlot's primary data processing and storage infrastructure is operated within secure data centre environments. In limited circumstances, personal data may be transferred to or processed by service providers located outside Malaysia — for example, in connection with cloud hosting, KYC verification services, or fraud screening tools operated by internationally certified providers.

Where personal data is transferred outside Malaysia, DMSlot ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applicable within Malaysia. These safeguards may include:

• Contractual clauses obligating the recipient to maintain equivalent data protection standards;
• Use of service providers operating in jurisdictions that provide adequate levels of data protection;
• Binding corporate rules applicable to group entities where relevant.

15Amendments to This Policy

DMSlot reserves the right to amend this Privacy Policy at any time in response to changes in applicable law, regulatory requirements, our data processing practices, or the services we offer. Material changes to this Policy will be communicated to registered Players via email notification to the address associated with their Account, with a minimum of 7 days' advance notice prior to the effective date of the change.

The current version of this Privacy Policy will always be available at dmslot.cam/privacy-policy, with the effective date displayed at the top of the document. We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy.

16Contact & Data Rights Requests

For all privacy-related enquiries, data rights requests, or concerns regarding this Policy, please contact the DMSlot Data Protection team using the details below. To enable us to process your request efficiently, please include your registered Account username and a clear description of your enquiry or request.

We take all privacy concerns seriously and are committed to resolving them promptly and fairly. If you remain dissatisfied with our response, you retain the right to lodge a complaint with the relevant data protection authority in your jurisdiction.