1. Home
  2. Privacy Policy
Privacy Policy

Privacy Policy slottoto – Malaysian Player Data Protection

Your privacy is our priority. This document clearly explains how slottoto collects, uses, stores and protects your personal information as a player on our platform.

Updated: 1 June 2026
Our Privacy Commitment

Slottoto's Six Data Protection Principles

We do not merely comply with data protection laws — we build systems that go well beyond the minimum requirements to protect your privacy.

End-to-End Encryption

All data transmitted between your device and slottoto servers is protected with 256-bit SSL encryption. Your sensitive information never travels in plain text format.

Minimal Data, Clear Purpose

Slottoto only collects data that is strictly necessary for platform operations. No excess data is collected, and every piece of data gathered has a clear and legitimate purpose.

No Sale of Data to Third Parties

Your data is never sold to advertisers, data brokers, or any third party for commercial purposes. This is a commitment we uphold without exception.

Full Control in Your Hands

You may review, amend, or request deletion of your personal data at any time through your account settings or by contacting our privacy team.

Secure Data Storage

All data is stored on servers equipped with strict access controls, 24/7 monitoring and encrypted backups. Internal access is also restricted to authorised staff only.

Immediate Breach Notification

In the event of any security breach affecting your data, slottoto will notify you within the timeframe specified under the applicable data protection guidelines.

Contents

Have questions about your privacy? Contact us.

[email protected]

01

Types of Personal Data We Collect

Slottoto collects your personal information in several different ways — during account registration, while you use the platform, and when you interact with our support services. Below is a full overview of the data we collect:

Data Category Examples of Information Requirements
Personal Identity Full name, date of birth, MyKad/passport number Mandatory (KYC)
Contact Information Email address, phone number Mandatory
Financial Information Bank name, account number (masked), transaction data Mandatory
Usage Data Game logs, betting history, gameplay preferences Automatic
Device Data IP address, browser type, operating system, device ID Automatic
Communication Data Support chat records, account-related emails Where applicable

Note: Bank account numbers and payment card details are stored in masked and encrypted format. slottoto does not store complete numbers in any database accessible to general staff.

02

How We Use Your Data

The data we collect is used for legitimate and transparent platform operational purposes. slottoto does not use your data for any purpose unrelated to providing services to you. The following are the primary purposes for data use:

  • Identity verification and KYC — to verify that accounts opened are legitimate and meet age eligibility requirements.
  • Financial transaction processing — deposits, withdrawals, and account balance management are handled using the financial data you provide.
  • Account security — detects and prevents unauthorised access, fraud, and suspicious activity.
  • Platform improvement — anonymised usage data helps us understand how players use the platform and make relevant improvements.
  • Service communications — sends important account notices, security updates, and platform information.
  • Legal compliance — fulfils reporting obligations and compliance requirements under applicable laws.
  • Customer support — resolves queries and issues reported by players more efficiently.

If you agree to receive marketing communications during registration, we will also use your email address to send you information about the latest promotions and offers from slottoto. You may withdraw this consent at any time through your account settings.

03

Legal Basis for Data Processing

Slottoto processes your personal data on valid legal grounds under Malaysia's Personal Data Protection Act 2010 (PDPA) and other applicable regulations. These legal bases include:

  • Contract performance — processing required to provide the platform services you use.
  • Legitimate interest — for platform security, fraud prevention, and service improvement purposes.
  • Legal obligation compliance — processing required to comply with applicable legislation.
  • Your consent — for specific marketing communications and analytics purposes, where you have given explicit consent.
04

Data Sharing with Third Parties

Slottoto does not sell your personal data to any third party. However, in the course of operating the platform, we may need to share certain data with the following parties, solely to enable our services to function:

  • Payment processors — DuitNow, FPX, TNG eWallet, GrabPay, and Boost providers receive the transaction data needed to process your payments.
  • Technical service providers — companies that provide the server infrastructure, cloud services, and cybersecurity tools we use.
  • Game providers — game developers receive the minimum technical data required to run games correctly.
  • Relevant authorities — when required by law or a valid court order.

All third parties working with slottoto are bound by strict data protection agreements and are not permitted to use your data for any purpose other than those specified.

International Data Transfers: If data needs to be processed outside Malaysia, slottoto ensures that equivalent or higher protection is applied through appropriate contractual agreements.

05

Personal Data Retention Period

Slottoto retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by law. The following are general data retention guidelines:

  • Active account data — retained for the duration your account is active and for a defined period following account closure.
  • Financial transaction records — retained for a minimum of 7 years for financial and tax compliance purposes.
  • KYC Documents — retained for a minimum of 5 years after the business relationship ends.
  • Log and security data — typically retained for 12–24 months for security and investigation purposes.
  • Support communication records — retained for 2 years for reference and dispute resolution purposes.

When data is no longer needed, it will be securely deleted or anonymised in accordance with established procedures.

06

Data Security Measures

The security of your data is a responsibility we take very seriously. slottoto continuously invests in security infrastructure to ensure your data is protected from both external and internal threats.

256-bit SSL
All data communications are protected by industry-grade encryption
Two-Factor Authentication
2FA is available and encouraged for all player accounts
Restricted Internal Access
The principle of least privilege is applied to all staff
24/7 Monitoring
Threat detection systems operate around the clock

While we take all reasonable steps to protect your data, no security system can be guaranteed 100% safe. You also play an important role in your account's security by using a strong password, not sharing your login credentials and reporting any suspicious activity to us promptly.

07

Cookies and Tracking Technologies

Slottoto uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use various types of cookies for different purposes:

  • Essential Cookies — required for core platform functions such as login sessions and language preferences. These cookies cannot be disabled.
  • Performance Cookies — collects information on how you use the platform to help us make improvements.
  • Functional Cookies — stores your preferences such as game settings and display options.
  • Analytics Cookies — helps us understand overall platform usage patterns on an aggregate and anonymised basis.

You can manage or block cookies through your browser settings. However, blocking essential cookies may affect the functionality of the slottoto platform.

08

Your Rights as a Data User

Under Malaysia's Personal Data Protection Act 2010 and related data protection regulations, you have important rights regarding your personal data. slottoto respects and facilitates the exercise of these rights:

Right of Access

You may request a copy of the personal data we hold about you at any time.

Right to Rectification

If your data is inaccurate or out of date, you may request an immediate correction.

Right to Erasure

You may request data deletion under certain circumstances, subject to legal obligations.

Right to Object

You may object to data processing for marketing purposes at any time.

Right to Portability

You may request your data in a machine-readable format for transfer.

Right to Restriction

You may request a restriction on the processing of your data under certain circumstances.

How to Exercise Your Rights: To submit any request regarding your privacy rights, contact our Data Protection Officer at [email protected] or via live chat within the platform. We will respond to your request within 30 calendar days.

09

Children's Data Protection

Slottoto is a platform designed exclusively for individuals aged 18 and above. We do not intentionally collect or process personal data from anyone under the age of 18.

If we find that we have collected data from someone under the age of 18, the relevant account will be closed immediately and all associated data will be deleted as soon as possible. If you believe your child has registered on our platform, please contact our support team immediately.

10

Amendments to the Privacy Policy

Slottoto reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or platform improvements. The date of the most recent update is always displayed at the top of this page.

For significant changes, we will notify you via your registered email or a prominent notice within the platform before the changes take effect. Continued use of the slottoto platform after such changes are enforced indicates your acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically. If you disagree with any changes, you may contact us to discuss available options or to close your account.

FAQ

General Questions About slottoto Privacy

Your data is only shared within the slottoto corporate group where necessary for legitimate operational purposes and is subject to equally strict data protection policies. We do not share data for cross-marketing purposes without your explicit consent. Every entity within the group that receives your data is bound by strict data protection agreements.

You may withdraw consent for marketing emails at any time in three ways: via the "unsubscribe" link at the bottom of any marketing email, through the notification settings in your slottoto account, or by contacting our support team. Withdrawal will take effect within 5 business days. You will still receive important transactional emails related to your account after unsubscribing.

When you close your slottoto account, we will retain your personal data only for as long as required by law — typically financial records for a minimum of 7 years and KYC documents for a minimum of 5 years from the closure date. Data not subject to legal obligations will be deleted or anonymised within 90 days of account closure. You may request a report on the data we hold about you after account closure.

slottoto uses multiple layers of security to protect your account: login monitoring that detects unusual locations and devices, two-factor authentication (2FA) available for all accounts, automatic notifications for logins from new devices, and an anomaly detection system that monitors unusual activity patterns. If we detect any suspicious activity, you will be notified immediately and your account may be temporarily suspended for your protection.

Yes, you have the right to request access to all personal data we hold about you. To make this request, contact our privacy team at [email protected] with the subject line "Data Access Request" along with your account number. We will process your request and provide the data in a readable format within 30 calendar days. The first request is free; subsequent requests within a 12-month period may be subject to a reasonable administrative fee.

Your Privacy is Protected. Join slottoto with Confidence

Our platform is built on trust and transparency. Your data is protected, your privacy is respected — all you need to focus on is the best gaming experience.

Register a Free Account About slottoto
Bahasa Melayu