Privacy Policy

This Privacy Policy ("Policy") describes how Suleslot ("the Platform", "we", "us", "our"), operating atsuleslot.cam, collects, processes, stores, discloses, and protects the personal data of individuals who access or use the Suleslot website and all associated services, including casino games, live dealer offerings, sports betting markets, loyalty programmes, customer support channels, and payment processing systems.

We are committed to safeguarding the privacy and personal data of all our players, including Malaysian players who access the platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations across Malaysia. This Policy is intended to be clear, transparent, and written in plain language — not buried in impenetrable legal jargon.

By registering an account, accessing the platform, or otherwise submitting personal data to Suleslot in any manner, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the platform.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" — Any information relating to an identified or identifiable natural person ("Data Subject"), including but not limited to name, email address, date of birth, national identification number, payment details, and IP address.
• "Processing" — Any operation or set of operations performed on Personal Data, whether or not by automated means, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Data Controller" — The entity that determines the purposes and means of the processing of Personal Data. For the purposes of this Policy, Suleslot is the Data Controller.
• "Data Processor" — A third party that processes Personal Data on behalf of the Data Controller under a contractual agreement.
• "Consent" — Any freely given, specific, informed, and unambiguous indication of the Data Subject's wishes by which they agree to the processing of their personal data.
• "KYC Documents" — Identity and address verification documents submitted by Players as part of the Know Your Customer verification process, including national identification cards, passports, driving licences, and proof of address documents.
• "Cookies" — Small text files stored on a user's browser or device by websites to remember information, track sessions, and deliver analytics and personalisation functionality.

Suleslot acts as the Data Controller in respect of all personal data collected through the platform. Suleslot is incorporated and operates under an international online gambling licence. The platform is accessible globally, including to users based in Malaysia.

All data-related enquiries, subject access requests, and data deletion requests should be directed to the Suleslot support team via the contact channels described in Section 15 of this Policy. We aim to respond to all formal data enquiries within thirty (30) calendar days of receipt.

Suleslot collects personal data through several channels: directly from you during registration, KYC submission, and support interactions; automatically when you access the platform; and from third-party payment and verification providers. The categories of data we collect are as follows:

4.1 Registration Data

When you create a Suleslot account, we collect:

• Full legal name
• Date of birth
• Email address
• Mobile number
• Residential address (including postcode and country)
• Username and encrypted password
• Currency preference (defaulting to MYR for Malaysian players)

4.2 Identity Verification (KYC) Data

To comply with anti-money laundering and age verification obligations, we collect:

• Copy of Malaysian NRIC, Driving Licence, or Passport
• Proof of residential address (utility bill, bank statement, or similar)
• Selfie photograph holding identity document
• Source of funds documentation (where applicable for large transactions)

4.3 Financial & Transaction Data

• Deposit and withdrawal transaction records
• Payment method identifiers (e.g., masked bank account number, e-wallet ID)
• Transaction amounts in MYR and, where applicable, cryptocurrency wallet addresses
• Payment method verification screenshots submitted during KYC

4.4 Technical & Usage Data

We collect data automatically when you access the platform, including:

4.5 Communications Data

When you contact Suleslot support via live chat or email, we retain records of those communications, including the content of messages and any attachments, for the purposes of service delivery, dispute resolution, and quality assurance.

Suleslot processes personal data only where a legitimate legal basis exists. The applicable legal bases under international data protection standards are as follows:

• Contract Performance: Processing necessary for the performance of the contract between Suleslot and the Player — including account creation, deposit processing, game delivery, bonus administration, and withdrawal processing.
• Legal Obligation: Processing required to comply with applicable legal obligations, including anti-money laundering (AML) requirements, age verification mandates, and regulatory reporting obligations under the platform's operating licence.
• Legitimate Interests: Processing undertaken in pursuit of Suleslot's legitimate interests, including fraud detection, platform security, abuse prevention, and business analytics — provided such interests are not overridden by the Player's fundamental rights.
• Consent: Processing based on the Player's explicit, freely given consent — for example, for the delivery of promotional communications where opt-in has been selected. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Suleslot uses the personal data we hold for the following purposes:

• Account Management: To create, maintain, and administer your Suleslot account, including authentication, password management, and account settings updates.
• Identity Verification (KYC): To verify your identity and age in accordance with anti-money laundering obligations and our licensing requirements. Suleslot enforces a strict 21+ minimum age policy.
• Payment Processing: To process deposits and withdrawals in MYR via supported Malaysian payment methods including Touch'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, BTC, and USDT.
• Regulatory Compliance: To fulfil AML screening, suspicious transaction reporting, and regulatory record-keeping obligations imposed by Suleslot's operating licence conditions.
• Customer Support: To provide live chat, email, and in-platform support services, resolve disputes, and maintain records of player interactions for quality and compliance purposes.
• Responsible Gambling: To monitor gameplay patterns for indicators of problem gambling behaviour and to administer responsible gambling tools including deposit limits, self-exclusion, and cool-off periods.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, unauthorised access, and other malicious conduct on the platform.
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving platform features, performance, game selection, and user experience.
• Marketing Communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and platform updates. You may withdraw this consent at any time.
• Legal Claims: To establish, exercise, or defend legal claims arising in connection with the platform or its services.

Suleslot does not sell, rent, or commercially transfer your personal data to third parties. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

7.1 Payment Service Providers

Your transaction data is shared with the relevant payment service provider when processing a deposit or withdrawal. This includes providers such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency processing partners. Each provider is subject to their own applicable privacy policy and data protection obligations.

7.2 Identity Verification Providers

KYC documents and identity data may be shared with third-party identity verification service providers engaged by Suleslot to perform automated or manual document checks. These providers process data solely on Suleslot's instructions under binding data processing agreements.

7.3 Regulatory & Legal Disclosures

We may be required to disclose personal data to regulators, law enforcement agencies, financial intelligence units, or courts of competent jurisdiction where required by applicable law or a valid legal process. We will notify affected players of such disclosures where legally permitted to do so.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a material portion of Suleslot's business assets, personal data held by Suleslot may be transferred to the acquiring entity, subject to equivalent data protection obligations. Players will be notified of any such transfer in advance.

Suleslot uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device by the website when you access it. They allow the platform to recognise your session, remember your preferences, and collect aggregated analytical data.

8.1 Categories of Cookies We Use

• Essential Cookies: Required for the basic operation of the platform, including session management, login authentication, and security functions. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, currency display, and game layout choices, improving your experience across sessions.
• Analytics Cookies: Used to collect anonymised data on how players interact with the platform — including pages visited, time on site, and navigation paths — to help us improve platform performance and usability.
• Security Cookies: Used to detect and prevent fraudulent activity, multi-account usage, and other security threats by fingerprinting browser and device characteristics.

8.2 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the platform, including your ability to log in or access game features. Detailed cookie management instructions are available through your browser's help documentation.

Suleslot retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that renders it no longer attributable to any individual.

Suleslot implements a comprehensive range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL Encryption: All data transmitted between your browser and the Suleslot platform is encrypted using Transport Layer Security (TLS 1.2 or higher). A valid SSL certificate is maintained at all times.
• Data Encryption at Rest: All stored personal and financial data is encrypted using AES-256 encryption. KYC documents are stored on isolated infrastructure with restricted access.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.
• Penetration Testing: The platform undergoes regular external security assessments and penetration testing by qualified cybersecurity professionals.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their accounts for an additional layer of security against unauthorised access.
• Fraud Detection Systems: Automated fraud detection systems monitor for unusual account activity, suspicious login patterns, and multi-account behaviour on an ongoing basis.

Notwithstanding these measures, no data transmission over the internet or electronic storage system is entirely immune to risk. Suleslot takes all reasonable steps to protect your data but cannot guarantee absolute security.

As Suleslot operates under an international licensing framework, personal data collected from Malaysian players may be transferred to and stored in jurisdictions outside of Malaysia. Such transfers are made only where:

• The receiving country organisation offers an adequate level of data protection equivalent to that applied by Suleslot under this Policy;
• Appropriate contractual safeguards are in place with the receiving entity, such as Standard Contractual Clauses or equivalent binding data transfer agreements; or
• The transfer is necessary for the performance of the contract between Suleslot and the Player — for example, processing a payment via a Malaysian payment gateway that routes through international infrastructure.

By using the Suleslot platform, you acknowledge and consent to the transfer of your personal data in the circumstances described above.

Subject to applicable law and any overiding legitimate interests or legal obligations held by Suleslot, you have the following rights in respect of your personal data: