Slot21 Privacy Policy —
How We Handle Your Data
At Slot21, we take the privacy of our Malaysian players seriously. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have over your information. Please read it carefully.
Last Updated: 1 January 2026Our Core Privacy Commitments to You
These cards summarise the key principles that govern how Slot21 handles your personal data. For full details, please read the complete policy below.
Data Security First
All personal and financial data transmitted through the Slot21 platform is encrypted using 256-bit SSL/TLS protocols. We apply strict internal access controls to ensure only authorised personnel can handle your information.
We Do Not Sell Your Data
Slot21 does not sell, rent, or trade your personal information to third-party marketers under any circumstances. Your data is used solely to operate our services and meet our legal obligations.
You Control Your Data
Malaysian players have clear rights over their personal data — including the right to access, correct, restrict processing of, and request deletion of information we hold about them. Contact us at any time to exercise these rights.
Minimal Data Collection
We collect only the personal data that is strictly necessary to provide our services, process transactions, verify your identity, and comply with applicable regulations. We do not collect data beyond what serves a clear, documented purpose.
Defined Retention Periods
We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including legal and regulatory retention requirements. Once the retention period expires, your data is securely deleted or anonymised.
Transparent Communication
We will notify you of any material changes to this Privacy Policy before they take effect. We will never make significant changes to how we use your data without giving you the opportunity to review and, where required, consent.
1. Introduction
This Privacy Policy ("Policy") describes how Slot21 ("the Company", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("Users", "Players", "you") who access or use the Slot21 platform available at slot21.click ("the Platform").
Slot21 is committed to safeguarding the privacy of all its players, including those based across Malaysia — in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond. We process personal data in accordance with applicable data protection principles and our internal data governance standards.
By registering an account on the Platform or by continuing to use our services, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions.
2. Definitions
For the purposes of this Policy, the following terms shall have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can reasonably identify a natural person, directly or indirectly — including name, MyKad / IC number, email address, phone number, IP address, and financial account details. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction. |
| "Data Controller" | Slot21, as the entity that determines the purposes and means of processing personal data collected through the Platform. |
| "Data Processor" | Any third party that processes personal data on behalf of Slot21, acting under our instructions and subject to a data processing agreement. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of the User's agreement to the processing of their personal data for a stated purpose. |
| "Cookies" | Small text files placed on a User's device by the Platform for the purpose of session management, analytics, and personalisation. |
3. Personal Data We Collect
3.1 Slot21 collects the following categories of personal data from Players:
3.1.1 Account Registration Data
- Full legal name (as it appears on your MyKad or Passport)
- Date of birth (for age verification — minimum 21 years)
- Email address and password (hashed and salted)
- Mobile phone number
- Residential address (city, state, postcode)
- Preferred currency (Malaysian Ringgit — MYR/RM)
3.1.2 KYC & Identity Verification Data
- Copy of valid Malaysian identity document (MyKad, Passport, or Driver's Licence)
- Proof of residential address (utility bill, bank statement dated within 3 months)
- Selfie photograph holding identity document
- Source of funds documentation (where required for enhanced due diligence)
3.1.3 Financial Transaction Data
- Deposit and withdrawal amounts, dates, and transaction references
- Payment method identifiers (e.g., last 4 digits of bank account, e-wallet account identifier for Touch 'n Go eWallet, Boost, GrabPay, GrabPay, DuitNow)
- Account balance history
- Bonus and promotional offer uptake records
3.1.4 Technical & Usage Data
- IP address and geolocation data (country and region level)
- Device type, operating system, and browser information
- Session logs, login timestamps, and access frequency
- Game play history, betting patterns, and session duration
- Cookie identifiers and tracking pixel data (see Section 9)
3.1.5 Communications Data
- Support chat transcripts and email correspondence
- Feedback, complaints, and dispute records
- Survey and promotional opt-in/opt-out preferences
3.2 We do not collect or store sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond KYC photographs), or genetic data.
4. How We Collect Your Data
4.1 Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion.
4.2 Automatically — through cookies, server logs, and analytics tools when you navigate and interact with the Platform. This includes technical data such as your IP address, device identifiers, and session behaviour.
4.3 From third parties — including identity verification service providers, payment processors (e.g., FPX, DuitNow), fraud prevention services, and, where applicable, publicly available data sources for due diligence purposes.
5. Legal Basis for Processing
5.1 Slot21 processes your personal data under one or more of the following legal bases:
| Legal Basis | Application |
|---|---|
| Contractual Necessity | Processing required to provide the services you have signed up for — account management, deposits, withdrawals, and gameplay. |
| Legal Obligation | Processing required to comply with anti-money laundering (AML) regulations, age verification obligations, and fraud prevention requirements. |
| Legitimate Interests | Processing necessary for fraud detection, platform security, responsible gambling monitoring, and service improvement — where our interests do not override your rights. |
| Consent | Marketing communications and certain non-essential cookies — where we rely on your explicit opt-in consent, which you may withdraw at any time. |
6. How We Use Your Personal Data
6.1 Slot21 uses the personal data we collect for the following documented purposes:
- Account management: Creating, maintaining, and securing your Slot21 account.
- Identity & age verification: Confirming you are at least 21 years of age and the registered account holder.
- Transaction processing: Handling deposits and withdrawals via Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX.
- Regulatory compliance: Meeting AML, counter-financing of terrorism (CFT), and responsible gambling obligations.
- Fraud prevention: Detecting and preventing fraudulent activity, bonus abuse, and unauthorised account access.
- Responsible gambling monitoring: Identifying at-risk betting patterns and applying player protection measures where appropriate.
- Customer support: Responding to queries, complaints, and dispute resolution requests.
- Service personalisation: Tailoring game recommendations and promotional offers to your activity profile.
- Marketing communications: Sending promotional emails and notifications where you have opted in — you may unsubscribe at any time.
- Platform improvement: Analysing aggregated usage data to improve performance, usability, and game variety.
6.2 We will not use your personal data for purposes that are incompatible with those stated above without giving you prior notice and, where required, seeking your consent.
7. Data Sharing & Disclosure
7.1 Slot21 does not sell or rent personal data to third parties. We share personal data only in the following limited and documented circumstances:
- Payment processors: To facilitate deposits and withdrawals through Malaysian payment channels (FPX, DuitNow, e-wallet providers). These processors are bound by contractual obligations to use your data solely for transaction processing.
- KYC & identity verification providers: To verify your identity and age as required by our responsible gambling and compliance obligations.
- Fraud prevention and AML services: To detect suspicious patterns, screen against sanctions lists, and prevent financial crime.
- IT and infrastructure providers: Cloud hosting, database, and cybersecurity vendors who process data on our behalf under strict data processing agreements.
- Legal and regulatory authorities: Where we are legally required to disclose data to a competent authority, regulator, law enforcement agency, or court of competent jurisdiction.
- Business transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified in advance of such a transfer.
8. International Data Transfers
8.1 Some of our service providers and infrastructure partners may be located outside Malaysia. Where personal data is transferred internationally, Slot21 ensures that appropriate safeguards are in place — including contractual clauses, data processing agreements, and equivalent security standards — to protect your data to a standard consistent with this Policy.
8.2 We do not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate technical and contractual safeguards.
9. Cookies & Tracking Technologies
9.1 Slot21 uses cookies and similar tracking technologies on the Platform for the following purposes:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Session management, authentication, and security (e.g., keeping you logged in securely). | No — essential for platform operation. |
| Functional | Remembering your language, currency, and display preferences. | No — necessary for user experience. |
| Analytics | Collecting aggregated data on page performance, navigation paths, and feature usage to improve the Platform. | Yes — opt-in required. |
| Marketing | Tracking promotional campaign effectiveness and personalising offer displays. | Yes — opt-in required. |
9.2 You may manage your cookie preferences at any time through your browser settings. Disabling strictly necessary cookies may impair your ability to use certain features of the Platform.
10. Data Retention
10.1 Slot21 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, in accordance with the following indicative retention schedule:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account + 5 years after closure |
| KYC / identity verification documents | Duration of account + 5 years after closure |
| Financial transaction records | 7 years (AML regulatory requirement) |
| Support communications | 3 years from last interaction |
| Technical / session logs | 12 months on a rolling basis |
| Marketing preference records | Until withdrawn + 1 year |
10.2 Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our data disposal procedures.
11. Data Security
11.1 Slot21 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:
- 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
- Encryption of sensitive data at rest, including KYC documents and financial records.
- Role-based access controls ensuring only authorised Slot21 personnel can access personal data, limited to what is necessary for their role.
- Regular security audits, vulnerability assessments, and penetration testing.
- Multi-factor authentication requirements for administrative access to data systems.
- Data breach detection monitoring and an internal incident response protocol.
11.2 In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, Slot21 will notify affected Players without undue delay and provide guidance on protective steps you can take.
11.3 While we apply industry-standard security measures, no system is entirely immune to risk. We encourage Players to use strong, unique passwords for their Slot21 accounts and to enable any available account security features.
12. Your Data Rights
12.1 As a User of Slot21, you have the following rights in relation to your personal data. You may exercise these rights by contacting us at [email protected]:
Right of Access
You have the right to request a copy of the personal data we hold about you, together with information about how it is being used. We will respond to verified requests within 30 days.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
Right to Erasure
You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations (e.g., AML record-keeping requirements).
Right to Restrict Processing
You may request that we suspend the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request its transfer to another service provider where technically feasible.
Right to Withdraw Consent
Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.
12.2 We will respond to all data rights requests within 30 days of receipt. Where a request is complex or we have received a large volume of requests, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it.
13. Minors & Age Verification
13.1 The Slot21 Platform is strictly for individuals aged 21 years and above. We do not knowingly collect or process personal data of individuals under the age of 21.
13.2 All account registrations are subject to age verification as part of the KYC process. Where we discover that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete the data where legally permissible, and notify the relevant responsible gambling support bodies where required.
14. Amendments to This Policy
14.1 Slot21 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable regulations, or business operations. The "Last Updated" date at the top of this page indicates when the current version was published.
14.2 Where we make material changes to this Policy — particularly changes that affect how we use your personal data or that reduce your privacy rights — we will notify you via email or in-platform notification at least 14 days before the changes take effect.
14.3 Your continued use of the Platform after the effective date of a revised Policy constitutes acceptance of the updated terms. If you do not accept the revised Policy, you must stop using the Platform and may request account closure in accordance with our Terms & Conditions.
15. Contact Us
If you have questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how we have handled your personal data, please contact the Slot21 Privacy team using the details below:
Email: [email protected]
Subject line: "Privacy Policy Enquiry" or "Data Rights Request"
Response time: Within 5 business days for general enquiries; within 30 days for formal data rights requests.
Please include your registered account username, the nature of your request, and — for data rights requests — a copy of a valid identity document so we can verify your identity before releasing or actioning any data.
Your Privacy is Safe with Slot21.
We built Slot21 for Malaysian players who value both great gaming and genuine data transparency. Questions? Our support team is here 24/7. For players aged 21 and above only.