Privacy Policy

1. Introduction

gdslot ("the Company", "we", "us", "our") operates the online gaming platform accessible at gdslot.asia ("the Platform"). The Company is committed to protecting the privacy and security of the personal data of all players and visitors who use the Platform ("you", "your").

This Privacy Policy describes what personal data gdslot collects from you, the purposes for which it is collected, how it is used and stored, with whom it may be shared, and the rights you have in relation to your personal data. This Policy forms part of, and should be read in conjunction with, the gdslot Terms and Conditions available at gdslot.asia/terms-conditions.

2. Data Controller

The Company is the data controller responsible for the personal data collected through the gdslot Platform. As data controller, the Company determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is conducted lawfully and in accordance with applicable data protection standards.

If you have any questions about how gdslot handles your personal data, or wish to exercise any of your data subject rights, please contact our Data Protection team via the support channel at [email protected] (plain text — not a clickable link).

3. Data We Collect

3.1 Registration Data

When you register an account on the gdslot Platform, we collect the following personal data:

• Full legal name as it appears on your official identification document.
• Date of birth (for age verification purposes — 21+ requirement).
• Email address.
• Malaysian mobile telephone number.
• Residential address.
• Username and encrypted password.

3.2 Identity Verification (KYC) Data

In accordance with our international gaming authority licence obligations and anti-money laundering requirements, we collect and verify:

• Copy of Malaysian Identity Card (MyKad) or valid passport.
• Proof of residential address (e.g., utility bill, bank statement dated within 90 days).
• Source of funds documentation for high-value accounts, where required.

3.3 Financial Data

We collect data relating to your financial transactions on the Platform, including:

• Deposit and withdrawal transaction records (amounts, dates, payment methods used).
• Payment method identifiers — e.g., the last four digits of a bank account or the mobile number associated with a Touch n Go eWallet or Boost account. We do not store full card or bank account numbers.
• Account balance history.

3.4 Gameplay Data

We collect records of your gameplay activity on the Platform, including games played, wagers placed, outcomes, bonus usage, and session duration. This data is used for account management, fraud prevention, responsible gaming monitoring, and regulatory compliance.

3.5 Technical and Usage Data

We automatically collect certain technical data when you access the Platform, including your IP address, device type and operating system, browser type and version, pages visited, time and date of access, and referring URL. This data is used for platform security, fraud detection, and service improvement.

3.6 Communications Data

We retain records of communications between you and gdslot customer support, including live chat transcripts and email correspondence, for quality assurance and dispute resolution purposes.

4. How We Use Your Data

gdslot uses the personal data it collects for the following purposes:

• Account management: to create, maintain, and administer your gdslot account, process deposits and withdrawals, and provide access to Platform services.
• Identity verification: to verify your age (21+ requirement), identity, and eligibility to use the Platform in compliance with our licensing obligations.
• Anti-money laundering: to conduct transaction monitoring and comply with AML/CFT obligations required under our international gaming authority licence.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent activity, unauthorised account access, and abuse of Platform services.
• Responsible gaming: to monitor player behaviour for indicators of problem gambling and to administer responsible gaming tools including self-exclusion, deposit limits, and cooling-off periods.
• Customer support: to respond to your enquiries and resolve disputes.
• Marketing communications: to send you promotional communications about gdslot offers and new features, where you have consented to receive such communications.
• Legal compliance: to comply with applicable laws, regulations, court orders, and requests from regulatory and law enforcement authorities.
• Platform improvement: to analyse usage patterns and improve the performance, features, and content of the gdslot Platform.

5. Legal Basis for Processing

gdslot processes your personal data on the following legal bases:

• Performance of contract: processing necessary for the performance of the agreement between you and gdslot, including account management and payment processing.
• Legal obligation: processing necessary for compliance with applicable laws and regulations, including AML/KYC obligations and age verification requirements imposed by our gaming licence.
• Legitimate interests: processing necessary for our legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your rights and interests.
• Consent: where you have given your explicit consent to specific processing activities, such as receiving marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Sharing Your Data

gdslot does not sell, rent, or trade your personal data to third parties. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment service providers: including Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, and Public Bank, to process deposits and withdrawals on your behalf.
• Identity verification providers: third-party KYC services used to verify the authenticity of identity documents submitted by players.
• Game software providers: to the extent necessary to facilitate gameplay on the Platform.
• Fraud prevention and security services: third-party providers used to detect and prevent fraudulent activity.
• Regulatory and law enforcement authorities: where required by law, court order, or the regulations of our gaming licensing authority.
• Professional advisers: including legal, accounting, and audit professionals, subject to confidentiality obligations.

All third parties with whom gdslot shares personal data are required to handle such data in accordance with applicable data protection standards and are prohibited from using it for any purpose other than that for which it was shared.

7. Cookies & Tracking Technologies

The gdslot Platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience. The categories of cookies we use include:

• Strictly necessary cookies: essential for the operation of the Platform, including session management and security functions. These cannot be disabled.
• Functional cookies: used to remember your preferences such as language settings and to maintain your logged-in session.
• Analytics cookies: used to collect aggregated, anonymised data about how the Platform is used, to help us improve performance and user experience.

You may control non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of parts of the gdslot Platform.

8. Data Security

The Company implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL encryption for all data transmitted between your browser and the gdslot Platform.
• Encryption of sensitive data fields at rest in our databases.
• Role-based access controls limiting internal access to personal data on a need-to-know basis.
• Regular security assessments and penetration testing of Platform infrastructure.
• Two-factor authentication options for all registered players.

While we take all reasonable steps to protect your data, no internet transmission is entirely secure. You are responsible for maintaining the confidentiality of your gdslot account credentials. If you suspect your account has been compromised, contact gdslot support immediately via live chat.

9. Data Retention

gdslot retains personal data for the period necessary to fulfil the purposes outlined in this Policy, to comply with applicable legal and regulatory obligations, and to resolve disputes or enforce our agreements. As a guide:

• Account data and KYC documentation are retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering regulations.
• Financial transaction records are retained for a minimum of five (5) years in accordance with applicable financial record-keeping requirements.
• Customer support communications are retained for a period of three (3) years for quality assurance and dispute resolution purposes.
• Technical and usage data is retained for up to two (2) years, after which it is anonymised or deleted.

When personal data is no longer required for the purposes for which it was collected and there is no legal obligation requiring its continued retention, it will be securely deleted or anonymised.

10. Your Rights

Subject to applicable law and the regulatory obligations of gdslot's gaming licence, you have the following rights in relation to your personal data:

• Right of access: the right to request a copy of the personal data we hold about you.
• Right to rectification: the right to request correction of inaccurate or incomplete personal data.
• Right to erasure: the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: the right to request that we limit the processing of your data in certain circumstances.
• Right to data portability: the right to receive a copy of your personal data in a structured, machine-readable format.
• Right to object: the right to object to the processing of your data on grounds of legitimate interests or for direct marketing purposes.
• Right to withdraw consent: where processing is based on your consent, the right to withdraw that consent at any time.

To exercise any of these rights, please contact the gdslot Data Protection team at [email protected]. We will respond to verified requests within thirty (30) days of receipt. We may need to verify your identity before processing a data subject request.

11. International Data Transfers

The gdslot Platform serves players across Malaysia, and the Company's operations involve the processing of personal data by service providers located in multiple jurisdictions. Where personal data is transferred outside of Malaysia, the Company ensures that such transfers are conducted with appropriate safeguards in place to ensure a level of protection equivalent to that provided under applicable data protection standards, including contractual clauses and, where applicable, compliance with the requirements of our international gaming authority licence.

12. Children's Privacy

The gdslot Platform is strictly for adults. Access is prohibited for persons under the age of 21. The Company does not knowingly collect personal data from individuals under the age of 21. If the Company becomes aware that it has inadvertently collected personal data from a person under the minimum age, it will promptly delete such data and close the associated account. If you believe a minor has registered on the gdslot Platform, please contact support immediately.

13. Changes to This Privacy Policy

The Company reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform services. Material changes will be notified to registered players by email to the address associated with their gdslot account, or by a prominent notice on the Platform, prior to the changes taking effect. The "Last Updated" date at the top of this Policy indicates the date of the most recent revision. Continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have concerns about how gdslot handles your personal data, please contact us via:

• 24/7 live chat, available directly on the gdslot Platform.
• Email: [email protected] (displayed as plain text — not a clickable link).

We aim to respond to all privacy-related enquiries within five (5) business days. For general enquiries about your account, deposits, or withdrawals, our 24/7 live chat team can assist you immediately.