Privacy Policy — Your Data Protection Rights

1. Introduction

1.1 slot98 is committed to protecting the privacy and security of all personal information provided by our users. This Privacy Policy applies to all data collected through our website, mobile-optimized platform, and any associated services.

1.2 This policy should be read in conjunction with our Terms & Conditions, which govern your use of the slot98 platform. Where terms are defined in the Terms & Conditions, those definitions apply equally to this Privacy Policy unless stated otherwise.

1.3 We reserve the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or operational needs. Material changes will be communicated to registered users via email and/or a prominent notice on the platform.

1.4 If you do not agree with the terms of this Privacy Policy, you should not use the slot98 platform. Continued use of the platform following any changes to this policy constitutes your acceptance of those changes.

2. Data Controller

2.1 For the purposes of applicable data protection laws, the data controller responsible for your personal information is slot98, operating under its international gaming licence.

2.2 As data controller, slot98 determines the purposes for which and the manner in which your personal data is processed. We are responsible for ensuring that all processing activities comply with applicable data protection legislation.

2.3 If you have any questions about how we handle your personal data or wish to exercise your data protection rights, you may contact us at: [email protected]

3. What Personal Data We Collect

3.1 We collect the following categories of personal information from you:

3.1.1 Registration Data

When you create an account, we collect:

• Full legal name (as it appears on your government-issued ID)
• Date of birth
• Residential address
• Email address
• Mobile phone number
• Chosen username and encrypted password
• Preferred currency (Indonesian Rupiah)

3.1.2 Identity Verification (KYC) Data

To comply with anti-money laundering regulations and licensing requirements, we collect:

• Copy of government-issued identification (KTP, Passport, or SIM)
• Proof of address document (utility bill or bank statement)
• Selfie photograph for facial verification (in some cases)
• Source of funds declaration (for high-value transactions)

3.1.3 Financial Data

When you make deposits or withdrawals, we collect:

• Bank account details (account number, bank name, account holder name)
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay account numbers)
• Payment card information (card number, expiry date, CVV — processed via secure third-party payment gateways)
• Transaction history (deposit amounts, withdrawal amounts, timestamps)

3.1.4 Usage Data

We automatically collect technical and usage information when you access our platform:

• IP address and geolocation data
• Device type, operating system, and browser type
• Pages visited, features used, and time spent on the platform
• Betting history (games played, stakes placed, wins, losses)
• Login timestamps and session duration
• Referral source (how you found slot98)

3.1.5 Communication Data

We retain records of your interactions with our customer support team:

• Live chat transcripts
• Email correspondence
• Support ticket details
• Feedback and survey responses

3.2 We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data (except facial images for KYC where required), health data, or data concerning sexual orientation, unless required by law or with your explicit consent.

4. How We Use Your Personal Data

4.1 We process your personal data for the following purposes:

4.1.1 Account Management

• To create and maintain your player account
• To authenticate your identity when you log in
• To provide customer support and respond to your inquiries
• To communicate important account updates and security notices

4.1.2 Service Provision

• To enable you to place bets and play games on the platform
• To process deposits and withdrawals
• To calculate and credit winnings to your account
• To apply bonuses and promotional offers
• To maintain game history and transaction records

4.1.3 Regulatory Compliance

• To verify your identity and age (21+ requirement)
• To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• To prevent fraud, collusion, and other prohibited activities
• To respond to legal requests from regulatory authorities or law enforcement
• To maintain audit trails as required by our gaming licence

4.1.4 Platform Improvement

• To analyze user behavior and platform performance
• To identify and fix technical issues
• To develop new features and enhance user experience
• To conduct A/B testing and optimize interface design

4.1.5 Marketing & Communications

• To send you promotional offers, bonuses, and tournament announcements (with your consent)
• To personalize content and recommendations based on your gaming preferences
• To conduct surveys and request feedback

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or by adjusting your account preferences.

4.1.6 Security & Fraud Prevention

• To detect and prevent fraudulent activity, bonus abuse, and multi-accounting
• To monitor for suspicious betting patterns
• To protect the integrity of our games and platform
• To enforce our Terms & Conditions

5. Legal Basis for Processing

5.1 Under applicable data protection laws, we must have a lawful basis for processing your personal data. We rely on the following legal bases:

5.1.1 Contractual Necessity

Processing is necessary to perform our contract with you (the Terms & Conditions). This includes account creation, payment processing, game provision, and customer support.

5.1.2 Legal Obligation

Processing is required to comply with legal obligations, including KYC/AML regulations, age verification, tax reporting, and cooperation with regulatory authorities.

5.1.3 Legitimate Interests

Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, data analytics, and marketing (where consent is not required by law). We always balance our interests against your privacy rights.

5.1.4 Consent

For certain processing activities (such as marketing communications and optional cookies), we rely on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

6. When We Share Your Personal Data

6.1 slot98 does not sell, rent, or trade your personal data to third parties for their marketing purposes. However, we may share your data with the following categories of recipients:

6.1.1 Service Providers

We engage trusted third-party service providers to support our operations:

• Payment Processors: BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, Visa, Mastercard, and other payment gateway providers process your financial transactions. They receive only the data necessary to complete payments.
• Game Studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and other game providers operate the games available on our platform. They may collect usage data for game analytics and RNG certification.
• KYC Verification Services: Third-party identity verification providers assist with document validation and fraud screening.
• Cloud Hosting: Our platform is hosted on secure cloud infrastructure providers who store data on our behalf.
• Customer Support Tools: Live chat and ticketing systems process communication data to enable support operations.

All service providers are bound by data processing agreements that require them to protect your data and use it only as instructed by slot98.

6.1.2 Regulatory & Legal Authorities

We may disclose your personal data to:

• Gaming regulatory bodies in the jurisdiction where slot98 is licensed
• Law enforcement agencies in response to valid legal requests
• Tax authorities where required by law
• Courts or tribunals in connection with legal proceedings

6.1.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the acquiring entity. We will notify you of any such change and the choices you may have regarding your data.

6.2 We do not share your personal data with third parties for their own marketing purposes without your explicit consent.

7. Data Security Measures

7.1 slot98 implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

7.1.1 Technical Safeguards

• 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using Transport Layer Security (TLS) with 256-bit encryption keys.
• Encrypted Data Storage: Sensitive personal data, including identity documents and payment details, is encrypted at rest using AES-256 encryption.
• Firewall Protection: Our servers are protected by enterprise-grade firewalls that block unauthorized access attempts.
• Intrusion Detection Systems: Real-time monitoring systems detect and respond to suspicious network activity.
• Secure Password Storage: User passwords are hashed using bcrypt with salt, ensuring they cannot be reverse-engineered even if our database is compromised.
• Two-Factor Authentication (2FA): Optional 2FA is available to add an extra layer of security to your account.

7.1.2 Organizational Safeguards

• Access Controls: Personal data is accessible only to authorized personnel who require it for their job functions. Access is granted on a need-to-know basis.
• Staff Training: All employees undergo regular data protection and security awareness training.
• Confidentiality Agreements: Personnel with access to personal data are bound by confidentiality obligations.
• Incident Response Plan: We maintain a documented data breach response plan to ensure swift action in the event of a security incident.
• Regular Audits: Our security practices are regularly reviewed and audited by internal teams and third-party security consultants.

7.2 While we take all reasonable precautions to secure your data, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your login credentials and for any activity conducted through your account.

7.3 If you suspect unauthorized access to your account or become aware of a security breach, you must notify us immediately at [email protected].

8. How Long We Retain Your Data

8.1 We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specific retention periods vary by data category:

8.1.1 Active Account Data

While your account remains active, we retain all account data, transaction history, and gaming records to provide ongoing service and comply with regulatory requirements.

8.1.2 Closed Account Data

After you close your account, we retain certain data for legal and regulatory compliance:

• Transaction Records: Retained for 7 years from the date of the transaction (Indonesian tax law and AML requirements).
• KYC Documents: Retained for 5 years from account closure (AML regulations).
• Gaming History: Retained for 5 years (licensing and dispute resolution).
• Communication Records: Retained for 3 years (customer service quality assurance).

8.1.3 Marketing Data

If you opt out of marketing communications, we will cease sending promotional messages but will retain a record of your opt-out preference to ensure compliance with your request.

8.1.4 Inactive Account Deletion

Accounts that remain inactive (no login or transaction) for more than 24 consecutive months may be archived or deleted, subject to regulatory retention requirements. You will receive advance notice before any data deletion occurs.

8.2 After the applicable retention period expires, personal data is securely deleted or anonymized so that it can no longer be linked to you.

9. Your Data Protection Rights

9.1 Under applicable data protection laws, you have the following rights regarding your personal data:

9.1.1 Right of Access

You have the right to request a copy of the personal data we hold about you. This includes account details, transaction history, and any other information processed by slot98.

9.1.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data. You can update most information directly through your account settings, or contact support for assistance.

9.1.3 Right to Erasure ("Right to Be Forgotten")

You have the right to request deletion of your personal data where:

• The data is no longer necessary for the purposes for which it was collected;
• You withdraw consent (where processing is based on consent);
• You object to processing and there are no overriding legitimate grounds;
• The data has been unlawfully processed.

Note that this right is not absolute. We may be required to retain certain data for legal or regulatory compliance even after you request deletion.

9.1.4 Right to Restrict Processing

You have the right to request temporary restriction of processing where:

• You contest the accuracy of the data (restriction until accuracy is verified);
• Processing is unlawful but you prefer restriction over deletion;
• We no longer need the data but you require it for legal claims;
• You have objected to processing (restriction pending verification of legitimate grounds).

9.1.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON), and to transmit that data to another service provider, where technically feasible.

9.1.6 Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. If you object to marketing, we will cease such processing immediately.

9.1.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

9.1.8 Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

9.2 To exercise any of these rights, please contact us at [email protected]. We will respond to all requests within 30 days, or sooner where required by law. In some cases, we may request additional information to verify your identity before fulfilling your request.

10. Cookies & Tracking Technologies

10.1 slot98 uses cookies and similar tracking technologies to enhance your experience on the platform, analyze usage patterns, and deliver personalized content.

10.1.1 What Are Cookies?

Cookies are small text files placed on your device by a website. They enable the site to recognize your device, remember your preferences, and provide functionality such as staying logged in across sessions.

10.1.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that enable you to navigate the site and access secure areas. These cannot be disabled.
• Performance Cookies: Collect anonymous data on how visitors use the platform (pages visited, time spent, error messages). This helps us improve functionality and user experience.
• Functional Cookies: Remember your preferences (language, currency, username) and provide enhanced features like live chat.
• Targeting/Advertising Cookies: Track your activity across websites to deliver personalized promotional content. These require your consent and can be disabled via your browser settings.

10.1.3 Third-Party Cookies

Game providers (Pragmatic Play, Evolution Gaming, etc.) and analytics services (Google Analytics) may place their own cookies on your device. These third parties have their own privacy policies governing cookie use.

10.1.4 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when a cookie is being set. Note that disabling certain cookies may affect platform functionality.

10.2 By continuing to use the slot98 platform, you consent to our use of cookies as described in this section.

11. International Data Transfers

11.1 slot98 operates internationally, and your personal data may be transferred to, stored in, and processed in countries outside Indonesia, including jurisdictions that may not provide the same level of data protection as Indonesian law.

11.2 When we transfer your data internationally, we ensure appropriate safeguards are in place, such as:

• Data processing agreements incorporating standard contractual clauses approved by relevant authorities;
• Transfer to countries recognized as providing adequate data protection;
• Certification under recognized international data protection frameworks.

11.3 By using the slot98 platform, you consent to the international transfer of your personal data as described in this policy.

12. Children's Privacy

12.1 slot98 services are strictly intended for individuals aged 21 years or older. We do not knowingly collect personal data from minors under the age of 21.

12.2 If we become aware that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete that information and close the associated account.

12.3 Parents or guardians who believe their child has provided personal data to slot98 should contact us immediately at [email protected].

13. Changes to This Privacy Policy

13.1 We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated to registered users via email and/or a prominent notice on the platform at least 14 days before the changes take effect.

13.2 The effective date of the current version is displayed at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your data.

13.3 Continued use of the platform after changes take effect constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, you should stop using the platform and close your account.

14. Contact Us

14.1 If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection team:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" (to ensure prompt routing)
• Live Chat: Available 24/7 on the platform
• Response Time: We aim to respond to all privacy-related inquiries within 5 business days

14.2 For data access requests, rectification, erasure, or other rights-related requests, please provide sufficient information to verify your identity (account username, registered email, date of birth) to expedite processing.