Privacy Policy

This Privacy Policy ("Policy") is issued by SimbolSlot ("we", "us", "the Operator", "the Platform") and applies to all personal data collected, processed, stored, or transmitted in connection with your use of the SimbolSlot website at simbolslot.cam and any associated services, including account management, deposits, withdrawals, casino gaming, sports betting, and customer support.

SimbolSlot is committed to protecting the privacy of every player who interacts with our platform. We recognise that Malaysian players place significant trust in us when they share personal information, and we take that responsibility seriously. This Policy sets out, in plain and transparent terms, what data we collect, the legal bases on which we process it, how we use and protect it, and the rights you hold in respect of your own data.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — i.e., information that can be used, alone or in combination with other data, to identify you as an individual.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, restriction, erasure, or destruction.
• "Data Controller" means SimbolSlot, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third-party organisation that processes Personal Data on behalf of SimbolSlot under a contractual arrangement.
• "KYC Data" means identity and age verification documentation submitted by Players in connection with the Know Your Customer process, including copies of government-issued identification documents.
• "Platform" means the SimbolSlot website at simbolslot.cam and all associated services.
• "Player" / "User" / "you" means any individual who registers an Account on or otherwise accesses the SimbolSlot Platform.
• "Cookies" means small text files placed on your device by the Platform to facilitate functionality, analytics, and personalisation.

The following categories of Personal Data may be collected by SimbolSlot in connection with your use of the Platform:

We do not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data (except where voluntarily disclosed in relation to responsible gambling self-assessments), or biometric data, unless strictly required by applicable law.

SimbolSlot collects Personal Data through the following channels:

Direct Collection

Information you provide directly to us during the registration process, when completing KYC verification, when making deposits or withdrawals, when contacting our support team, or when participating in promotional campaigns.

Automated Collection

Technical and Usage Data collected automatically when you access the Platform through server logs, cookies, pixel tags, and similar technologies. This data is collected regardless of whether you are logged into your Account. Please refer to Section 8 (Cookies & Tracking) for more detail.

Third-Party Sources

In limited circumstances, we may receive information about you from third parties, including:

• Payment service providers (such as the operators of DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay) who share transaction confirmation data with us.
• Identity verification services we engage to assist with KYC processing.
• Fraud prevention and AML screening services.
• Analytics providers who supply aggregated, anonymised data about platform usage patterns.

SimbolSlot processes your Personal Data on the following legal bases, each of which applies to specific categories and purposes of processing:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions agreed between you and SimbolSlot — including operating your Account, processing deposits and withdrawals, and providing gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) legislation, age verification requirements, and tax reporting obligations.
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud detection and prevention, platform security, responsible gambling monitoring, and the improvement of our services — provided these interests are not overridden by your privacy rights.
• Consent: Where we rely on your consent as the legal basis for processing (for example, optional marketing communications), you may withdraw that consent at any time by contacting our support team or adjusting your Account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

SimbolSlot uses your Personal Data for the following specific purposes:

• Account Management: Creating, maintaining, and securing your Account; verifying your identity and age (21+ requirement); processing login and authentication.
• Payment Processing: Facilitating deposits and withdrawals in MYR through approved payment channels including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank.
• Platform Operation: Delivering casino games, live dealer products, sports betting markets, and all other features of the SimbolSlot Platform to you.
• Responsible Gambling: Monitoring gaming behaviour to identify signs of problematic play; administering deposit limits, session controls, and self-exclusion tools; complying with responsible gambling obligations.
• Fraud Prevention & Security: Detecting and investigating suspicious activity, unauthorised access attempts, and potential financial crime; maintaining the security and integrity of the Platform.
• Legal & Regulatory Compliance: Fulfilling KYC obligations; maintaining records required by AML regulations; responding to lawful requests from regulatory or law enforcement authorities.
• Customer Support: Responding to Account queries, technical issues, payment disputes, and complaints via live chat and email.
• Platform Improvement: Analysing usage patterns to improve platform design, performance, game selection, and the overall player experience.
• Marketing Communications (consent-based): Where you have opted in, sending you promotional offers, bonus notifications, and relevant updates. You may opt out at any time.

We do not use automated decision-making processes that produce significant legal effects about you, except where required by law or with your explicit consent.

SimbolSlot does not sell, rent, or trade your Personal Data. We share your data only in the limited circumstances described below, and always subject to appropriate contractual safeguards:

Service Providers & Data Processors

We engage carefully selected third-party service providers to assist in operating the Platform. These may include payment processors, identity verification providers, cloud hosting services, analytics platforms, and customer support technology providers. All processors are bound by data processing agreements that restrict their use of your data to the specific services they provide on our behalf.

Legal & Regulatory Disclosure

We may disclose your Personal Data to competent regulatory, law enforcement, or government authorities where we are legally required or permitted to do so — for example, in connection with AML investigations, court orders, or regulatory audits.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of the SimbolSlot business, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify affected Players of any such transfer and the implications for their data in advance where practicable.

SimbolSlot uses cookies and similar tracking technologies to operate certain Platform features, understand user behaviour, and improve the overall experience. The types of cookies used on our Platform are as follows:

Most web browsers allow you to control cookie settings through the browser's privacy or settings menu. Disabling strictly necessary cookies may impair core Platform functionality including the ability to log in or complete transactions. Analytics and functional cookies can generally be disabled without affecting core Platform operations.

SimbolSlot does not use third-party advertising or retargeting cookies that track your behaviour across external websites.

SimbolSlot implements a comprehensive range of technical and organisational security measures to protect your Personal Data from unauthorised access, accidental loss, destruction, or disclosure. These include:

• Transport Security: 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption at Rest: Sensitive Personal Data, including KYC documents and financial records, is encrypted in our database systems using industry-standard encryption algorithms.
• Access Controls: Personal Data is accessible only to authorised personnel on a strict need-to-know basis. Access is controlled through role-based permissions and multi-factor authentication for administrative systems.
• Penetration Testing: Our security infrastructure is subject to regular independent testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: We maintain a documented incident response plan. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected Players and, where required, relevant authorities, within the timeframe prescribed by applicable law.

SimbolSlot retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal retention obligations. Our general retention principles are as follows:

• Active Account Data: Retained for the duration of your Account's active status on the Platform.
• Transaction & Financial Records: Retained for a minimum period of five (5) to seven (7) years following the transaction date, consistent with standard AML and financial record-keeping requirements.
• KYC Documents: Retained for the period required by applicable AML regulations, typically five (5) years from the date of the last transaction or Account closure.
• Support Communications: Retained for a reasonable period to facilitate dispute resolution and quality improvement, typically three (3) years from the date of the interaction.
• Marketing Consent Records: Retained for as long as your consent remains active, and for a period thereafter sufficient to demonstrate the consent was validly obtained if required.

When Personal Data is no longer required and no legal obligation mandates its continued retention, it is securely deleted or irreversibly anonymised so that it can no longer be linked to you as an individual.

Subject to applicable law, you hold the following rights in respect of your Personal Data held by SimbolSlot:

• Right of Access: You have the right to request a copy of the Personal Data we hold about you and information about how it is processed.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete Personal Data. For minor profile details, you may be able to update this directly within your Account settings.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations that may prevent immediate deletion.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data is disputed.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format and to have it transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object to processing based on our legitimate interests, including profiling for marketing purposes. You may also withdraw consent for marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of the above rights, please contact our Data Privacy Team via the channels described in Section 15. We will respond to verified requests within a reasonable timeframe, and in no event longer than thirty (30) days unless an extension is required due to the complexity or volume of the request, in which case we will notify you accordingly.

The SimbolSlot Platform is strictly intended for adults aged 21 and above. We do not knowingly collect Personal Data from any individual below the age of 21. Our registration process includes mandatory age verification procedures to prevent underage access.

If we become aware that Personal Data has been collected from a person below the age of 21, we will take immediate steps to delete that data and close the associated Account. If you believe that a minor has registered on the SimbolSlot Platform, please notify us immediately at [email protected] so that we can investigate and take appropriate action.

Parents and guardians concerned about underage gambling are encouraged to make use of parental control software and to review our Responsible Gambling page for further guidance and resources available in Malaysia.

SimbolSlot operates globally, and in some cases your Personal Data may be transferred to and processed in countries outside Malaysia. This may occur, for example, when we use cloud hosting infrastructure or engage service providers whose systems are located in other jurisdictions.

Where Personal Data is transferred internationally, SimbolSlot ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under Malaysian law. These safeguards may include:

• Contractual arrangements with processors that include data protection clauses equivalent to applicable legal standards.
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection.
• Additional technical safeguards such as end-to-end encryption that provide protection independent of the destination jurisdiction.

You may request further information about the specific safeguards applicable to any international transfer of your Personal Data by contacting our support team.

SimbolSlot reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the features and services offered by the Platform. When material changes are made, we will update the "Last updated" date at the top of this document.

Where changes are significant, we will take reasonable steps to bring them to your attention — for example, through an in-platform notification or an email to your registered address. We encourage you to review this Policy periodically.

Your continued use of the SimbolSlot Platform following the publication of an updated Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should cease using the Platform and contact our team to arrange Account closure as described in our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or SimbolSlot's handling of your Personal Data, please contact us through the following channels:

• 24/7 Live Chat: Available directly within the SimbolSlot Platform when you are logged in to your Account.
• Email: [email protected] — please include "Privacy Request" in your subject line so your query is routed to the appropriate team.

We are committed to resolving privacy-related concerns fairly and promptly. Email queries relating to data rights are typically acknowledged within two (2) business days and resolved within thirty (30) calendar days, subject to the complexity of the request.