Privacy Policy GDSlot — Protection of Your Personal Data

1 Introduction

Welcome to the GDSlot Privacy Policy. This document is an agreement between you as a user and GDSlot regarding how we handle the personal information you share with us when using our online gaming platform.

GDSlot operates as an online gaming platform offering slot games, live casino, sports betting and a variety of other digital entertainment. In delivering these services, we collect certain personal data from our users solely for operational, security and service quality improvement purposes.

We are committed to protecting your privacy. All data collection and handling processes at GDSlot are in full compliance with Personal Data Protection Act 2010 (PDPA) Malaysia, which is the primary law governing personal data protection in this country. We also adhere to internationally recognised best practices in data protection.

By registering an account on GDSlot or by continuing to use our platform, you are deemed to have read, understood, and agreed to all provisions of this Privacy Policy. If you do not agree with any part of this policy, we recommend that you discontinue use of our platform.

2 Information Collected

GDSlot collects several categories of personal information from users to enable us to provide a secure, seamless and high-quality service. The information we collect falls into two main categories: information you provide directly and information collected automatically while you use our platform.

Information You Provide Directly

• Registration information: Full name, date of birth, gender, national identity card number (MyKad) or passport, email address and phone number.
• Financial information: Bank account number, bank name, account holder name and digital wallet details for deposit and withdrawal purposes.
• Identity verification documents (KYC): A copy of your MyKad, passport, utility bill or other identification document as part of the Know Your Customer process.
• Communications: Any messages, complaints or enquiries you send to the GDSlot support team via Live Chat, email or other communication channels.

Automatically Collected Information

• Technical data: IP address, device type, operating system, browser version, and screen resolution.
• Activity data: Pages visited, games played, session duration, login and logout times.
• Transaction data: Deposit records, withdrawals, betting history and wins.
• Location data: General geographic location based on IP address for compliance and security purposes.
• Cookies and tracking data: Session information and user preferences stored via cookies.

Data Type	Primary Purpose	Retention Period
Identity Information	KYC verification, fraud prevention	5 years after account closure
Financial Information	Payment processing, auditing	7 years (legal requirement)
Technical Data	Security, troubleshooting	90 days
Gaming Activity Data	Customer support, audits	3 years
Support Communications	Referrals and service improvement	2 years

3 How We Use Your Data

Every piece of information we collect is used for a specific and lawful purpose. GDSlot does not use your data for any purpose not stated in this Privacy Policy. The following are the primary purposes for which your personal data is used:

• Account management: To create, manage, and maintain your account on the gdslot platform, including the login process and identity verification.
• Financial transaction processing: To process deposits, withdrawals, and all other financial transactions securely and accurately.
• KYC verification: To ensure all members meet the age and identity eligibility requirements set by law.
• Fraud prevention and anti-money laundering: To identify and investigate any suspicious or unauthorized activity on the platform.
• Service improvement: To analyze usage patterns and continuously improve the overall user experience.
• Marketing communications: To send you information about promotions, bonuses, and exclusive offers that may interest you (subject to your preferences).
• Legal compliance: To fulfill applicable legal and regulatory obligations, including reporting to authorities where required.
• Customer support: To provide effective assistance when you contact our support team.

4 Sharing Information with Third Parties

GDSlot maintains a strict policy regarding the sharing of personal data. We will not sell, rent, or trade your personal information to any third party for commercial purposes. However, there are specific situations where data sharing is necessary and legally permitted:

Trusted Service Providers

We share necessary data with third-party service providers who assist us in operating the platform, including payment processors, cloud service providers, identity verification companies and audit firms. All such third parties are bound by strict confidentiality agreements and may only use your data for specific, defined purposes.

Legal Requirements

GDSlot will disclose your personal information to the relevant authorities when:

• A court order or directive from a lawful authority is in place.
• Required to comply with Anti-Money Laundering (AML) laws.
• A criminal investigation involving your account is underway.
• Required to protect public safety interests.

Business Transfer

Should GDSlot be involved in a merger, acquisition or asset sale, user data may be transferred as part of that transaction. Users will be notified in advance should any significant change in data management occur.

5 Encryption & Security Measures

The security of your personal data is a responsibility we take extremely seriously. GDSlot invests in cutting-edge security infrastructure to ensure your data is always protected against unauthorised access, data breaches and cyber threats.

• 256-bit SSL encryption: All data transmitted between your device and GDSlot's servers is protected with industry-standard SSL encryption. The padlock icon in your browser's address bar confirms this secure connection.
• Data encryption at rest: Sensitive data stored in our database, including financial information and KYC documents, is encrypted using the AES-256 encryption algorithm.
• Layered access controls: Only authorised personnel may access users' personal data, and every access is logged and audited.
• Two-factor authentication (2FA): GDSlot supports and recommends the use of 2FA for all user accounts as an additional layer of security.
• 24/7 Monitoring: Our automated monitoring system is always active to detect any unusual activity or potential security threats.
• Regular security audits: GDSlot conducts regular penetration testing and security audits by independent cybersecurity firms.

6 Cookies & Tracking Technologies

GDSlot uses cookies and similar tracking technologies to enhance the user experience, understand usage patterns and ensure platform security. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login authentication and session management. These cookies cannot be disabled.
• Performance cookies: Collects information on how users interact with our platform to help us improve our services. All data is collected anonymously.
• Functional cookies: Stores user preferences such as preferred language and display settings for a more personalised experience.
• Analytical cookies: Used by trusted third-party analytics tools to understand overall website traffic and usage patterns.

You can control and manage cookies through your browser settings. However, disabling certain cookies may affect the functionality and your experience on the GDSlot platform.

7 Your Rights as a User

Under Personal Data Protection Act 2010, as a GDSlot user, you have certain rights regarding your personal data. GDSlot respects and facilitates the exercise of these rights:

To exercise any of the above rights, please contact the gdslot Data Protection Officer (DPO) team via our support email. We will process your request within 30 working days from the date of receipt.

8 Data Storage & Deletion

GDSlot retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal requirements. Once the retention period expires, your data will be securely deleted or anonymised.

For active accounts, your personal data will be retained for as long as the account remains active. Once an account is closed at your request or for any other reason, your data will be retained according to the following schedule before being deleted:

• Identity and KYC documents — retained for 5 years after account closure.
• Financial transaction records — retained for 7 years in compliance with accounting and tax legal requirements.
• Customer support communication logs — retained for 2 years.
• Technical and security log data — retained for 90 days.

9 Third-Party Links & Services

The GDSlot platform uses several trusted third-party services to enable smooth and secure operations. These include payment processors, game providers, identity verification services and analytics platforms. Each provider undergoes GDSlot's rigorous evaluation process before being granted access to user data.

It is important to understand that each of these third-party providers has its own privacy policy. GDSlot is not responsible for the privacy practices of those third parties, though we ensure they meet our minimum security standards through contractual agreements.

10 Changes to This Privacy Policy

GDSlot reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or technological developments. Any significant changes will be communicated to you via:

• In-platform notifications on GDSlot while you are logged in.
• Email the address registered to your account.
• A clear notice on the main page of this Privacy Policy.

The "Updated" date at the top of this page indicates the last time this Privacy Policy was revised. Your continued use of the gdslot platform after any amendments take effect constitutes your acceptance of the updated policy.

11 Contact Our Data Protection Officer

If you have any questions, concerns or complaints regarding how GDSlot handles your personal data, or to exercise any of your rights under PDPA 2010, please contact our Data Protection Officer (DPO):

You may also reach us via the 24/7 Live Chat available on the GDSlot platform. For formal complaints relating to data protection, you also have the right to contact Malaysia Department of Personal Data Protection which falls under the Ministry of Communications.