SlotKaki Privacy Policy

This Privacy Policy (hereinafter "Policy") issued by SlotKaki (hereinafter "SlotKaki", "we", "us", "our"), the operator of the online gaming platform accessible at slotkaki.cam. This Policy applies to all personal data processed by SlotKaki in connection with your use of the SlotKaki platform, including the website, mobile-optimised interface, and all associated gaming services (collectively, the "Platform" or "Services").

SlotKaki is committed to handling personal data responsibly, transparently, and in accordance with the data protection obligations applicable under its international gaming licence. This Policy is intended to inform you — as a registered player or visitor to the Platform — of your rights and our obligations with respect to personal data.

By accessing the Platform, registering an Account, or otherwise engaging with our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you should not use the Platform.

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" — Any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to that person.
• "Data Controller" — SlotKaki, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — A third party that processes personal data on behalf of SlotKaki, such as payment processors, KYC verification providers, and cloud infrastructure providers.
• "Processing" — Any operation or set of operations performed on personal data, including collection, storage, organisation, structuring, retrieval, use, disclosure, transmission, or deletion.
• "Consent" — Any freely given, specific, informed, and unambiguous indication of agreement by which a data subject signifies their acceptance of the processing of personal data relating to them.
• "KYC" — Know Your Customer — the identity and age verification process required under SlotKaki's international gaming licence obligations.
• "Cookies" — Small text files placed on a user's device by a website to store information relevant to the user's session or preferences.

SlotKaki collects personal data in the following categories, depending on the nature of your interaction with the Platform:

SlotKaki collects personal data through the following means:

• Direct Provision: Information you provide when registering an Account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, including IP address, device identifiers, session data, and cookie-based tracking data.
• Third-Party Sources: Identity verification data from KYC service providers; fraud intelligence data from payment processors; and geolocation data from technology service partners, all used strictly in the context of operating the Platform and fulfilling our regulatory obligations.
• Payment Providers: Transaction confirmation data from FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency payment processors, necessary to confirm and reconcile deposits and withdrawals in MYR.

SlotKaki processes personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil the Terms and Conditions of the Player's Account — including identity verification, payment processing, and gameplay record-keeping — is necessary for the performance of the contract between SlotKaki and the Player.
• Legal Obligation: SlotKaki is subject to regulatory requirements under its international gaming licence, including KYC verification, anti-money laundering (AML) record-keeping, and responsible gambling monitoring. Processing personal data for these purposes is a legal obligation to which SlotKaki is subject.
• Legitimate Interests: SlotKaki processes certain technical and usage data based on its legitimate interests in maintaining platform security, preventing fraud, detecting duplicate accounts, and improving the Player experience, provided such processing does not override the Player's rights and interests.
• Consent: Where SlotKaki sends direct marketing communications (e.g., promotional email notifications or SMS alerts regarding bonuses and offers), such processing is based on the Player's explicit prior consent, which may be withdrawn at any time via the Account settings or by contacting support.

SlotKaki uses collected personal data for the following purposes:

• To register, verify, and maintain your Account, including age verification (minimum 21 years) and KYC compliance;
• To process deposits and withdrawals in MYR through your selected payment method (FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, bank transfer, or cryptocurrency);
• To detect and prevent fraud, money laundering, duplicate account creation, and other prohibited conduct under our Terms and Conditions;
• To comply with regulatory obligations under our international gaming licence, including transaction monitoring, suspicious activity reporting, and AML record-keeping;
• To provide customer support via live chat and email, and to maintain records of support interactions for quality and dispute resolution purposes;
• To monitor your gambling activity for responsible gambling purposes, including proactively contacting you if patterns indicative of problem gambling are detected;
• To administer promotions, bonuses, and VIP tier rewards to which you are entitled, including birthday bonuses and referal programme payments;
• To send you transactional communications (e.g., deposit confirmations, withdrawal processing updates, KYC request notifications) — these are not marketing communications and do not require a separate consent basis;
• To send you promotional communications (bonus offers, new game announcements, special events) — only where you have provided separate explicit consent, and only until such consent is withdrawn;
• To improve and develop the Platform through analysis of anonymised usage data and player feedback;
• To enforce our Terms and Conditions and take action against accounts found to be in breach.

SlotKaki does not sell, rent, or otherwise trade your personal data to any third party for commercial gain. Personal data is shared with third parties only in the following limited and controlled circumstances:

• Payment Processors: Financial data is shared with payment service providers (including FPX, DuitNow, Touch 'n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and crypto payment processors) strictly to facilitate the processing of your deposits and withdrawals. These processors are bound by their own data protection obligations.
• KYC and Identity Verification Providers: Identity and document data may be shared with licensed third-party KYC service providers engaged to verify your identity and age on SlotKaki's behalf. These providers act as data processors and may not use your data for any other purpose.
• Regulatory and Legal Authorities: SlotKaki may disclose personal data to relevant regulatory bodies, licensing authorities, or law enforcement agencies where required to do so by law, court order, or in connection with the investigation of fraud, money laundering, or other criminal conduct.
• Technology and Infrastructure Partners: Technical data may be processed by cloud hosting, cybersecurity, and platform infrastructure providers who act as data processors under contractual data processing agreements with SlotKaki.
• Responsible Gambling Partners: In the limited circumstance that a player is placed on a self-exclusion list or is referred to an external support organisation, limited identifying data may be shared with the relevant partner organisation solely for the purpose of facilitating the player's protection.

SlotKaki uses cookies and similar tracking technologies on the Platform to enable certain functionality, improve performance, and enhance security. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cookies cannot be disabled without fundamentally impairing Platform functionality.
• Functional Cookies: Used to remember your preferences, such as your preferred language, notification settings, and last game played. Disabling these cookies may affect your Platform experience.
• Analytics Cookies: Used to collect anonymised data about how players use the Platform — which pages are visited most frequently, how long sessions last, and which features are used — to enable SlotKaki to improve the Platform over time. These cookies do not identify individual users.
• Security Cookies: Used to detect and prevent fraudulent activity, duplicate account creation, and other prohibited conduct, including IP-based analysis and device fingerprinting where technically necessary for platform integrity.

You may manage cookie preferences through your web browser settings. Please note that disabling certain categories of cookies may affect the functionality of the Platform. SlotKaki does not use third-party advertising or retargeting cookies.

SlotKaki implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the SlotKaki Platform;
• Encryption of sensitive data fields (including financial data and identity document references) at rest using industry-standard encryption algorithms;
• Access controls ensuring that personal data is accessible only to SlotKaki employees and authorised third-party processors with a specific operational need;
• Regular independent security audits and penetration testing of Platform infrastructure;
• Intrusion detection and monitoring systems that identify and respond to suspicious access attempts in real time;
• Multi-factor authentication requirements for administrative access to systems holding personal data;
• Staff data protection training and confidentiality obligations applicable to all employees with access to personal data.

In the event of a personal data breach that poses a risk to the rights and freedoms of affected Players, SlotKaki will notify affected individuals and relevant regulatory authorities in accordance with applicable data breach notification requirements within the timeframes prescribed by applicable law.

SlotKaki retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory, legal, or contractual obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of the Account's active status, plus an additional period as required by AML and gaming regulatory record-keeping obligations (typically five to seven years following Account closure).
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with anti-money laundering obligations applicable under our international gaming licence.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification or Account closure, whichever is later, as required by applicable AML regulations.
• Support Communications: Retained for up to three (3) years from the date of each interaction, for dispute resolution, quality assurance, and regulatory audit purposes.
• Marketing Consent Records: Retained until consent is withdrawn, plus one (1) year thereafter as evidence of the consent record.
• Technical and Usage Data: Typically retained in identifiable form for up to twelve (12) months, after which data is anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with SlotKaki's internal data lifecycle procedures. Anonymised data (which cannot be used to identify any individual) may be retained indefinitely for statistical and Platform improvement purposes.

As a data subject whose personal data is processed by SlotKaki, you hold the following rights in respect of your personal data. Requests to exercise any of these rights should be submitted in writing to [email protected] with "Data Rights Request" in the subject line. SlotKaki will respond to all substantiated requests within thirty (30) calendar days.

Please note that some rights are subject to limitations. For example, SlotKaki cannot delete transaction or KYC records that are required to be retained under applicable AML and gaming regulatory law, even where a deletion request is submitted.

The SlotKaki Platform is strictly intended for use by persons who are 21 years of age or older. SlotKaki does not knowingly collect, process, or retain personal data relating to persons under the age of 21.

Where SlotKaki discovers or has reasonable grounds to believe that personal data has been collected from a person under 21 without verified parental consent (and without any expectation that a person under 21 should be using the Platform), SlotKaki will take immediate steps to delete all such data, close the relevant Account, and report the matter to appropriate authorities where required by law.

If you are the parent or guardian of a minor who you believe has accessed or registered on the SlotKaki Platform, please contact us immediately at [email protected] so that we may take appropriate action without delay.

SlotKaki operates under an international gaming licence and uses cloud infrastructure and third-party service providers that may be located outside Malaysia. As a result, your personal data may be transferred to stored in, or processed in jurisdictions outside of Malaysia, including in countries whose data protection laws may differ from those applicable in Malaysia.

When personal data is transferred outside Malaysia to data processors in other jurisdictions, SlotKaki ensures that appropriate safeguards are in place to protect the data, including:

• Contractual data processing agreements incorporating data protection obligations consistent with internationally recognised standards;
• Restricting transfers to jurisdictions with adequate data protection frameworks assessed by SlotKaki's data protection compliance review;
• Technical security measures (encryption, access controls) applied consistently regardless of where data is stored or processed.

SlotKaki reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or operational circumstances. Where material changes are made to this Policy, SlotKaki will notify registered Players by email to the address on record or by displaying a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision to this Privacy Policy is displayed at the top of this page. We encourage Players to review this Policy periodically. Continued use of the Platform following notification of amendments constitutes acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by SlotKaki, please contact us through the following channels:

• Email: [email protected] — for data rights requests, please include "Data Rights Request" in the subject line
• Live Chat: Available24/7 via the Platform — for general privacy questions and account-related data queries
• Support Hours: 24 hours a day, 7 days a week, including Malaysian public holidays

SlotKaki will acknowledge all data-related correspondence within 48 hours and will provide a substantive response within 30 calendar days of receiving a complete and verifiable request.