Privacy Policy Selot138 – Our Commitment to Protecting Malaysian Players' Data

1 Introduction to Selot138's Privacy Policy

Selot138 is an online casino platform operating exclusively for the Malaysian market. We understand that players' trust in the security of their personal data is the foundation of the long-term relationship we aim to build. This Privacy Policy has been carefully crafted to ensure every selot138 player knows exactly how their information is handled.

As a platform operating in Malaysia, Selot138 is bound by the Personal Data Protection Act 2010 (PDPA). We regard compliance with this legislation not merely as an obligation, but as a minimum standard — we continually strive to go beyond what the law requires in protecting your privacy.

This Privacy Policy describes the types of data we collect, the purposes for which it is used, who it may be shared with (if anyone), how long it is retained, and what your rights are as a data subject. If you have any questions after reading this document, our Data Protection Officer team is ready to assist.

2 Types of Personal Data We Collect

Selot138 collects your personal data through several means: directly from you during registration and platform use, automatically via tracking technologies, and in some cases from legitimate third parties such as identity verification providers.

Below is a summary of the data categories we collect and the purpose behind each:

3 How selot138 Uses Your Data

Selot138 uses your personal data only for legitimate, stated purposes. We will not use your data for purposes unrelated to the operation of the platform without first obtaining your consent.

• Account Management: To create, verify and manage your Selot138 account, including any mandatory KYC processes.
• Transaction Processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, and to manage withdrawal of winnings to your Malaysian bank account.
• Security & Anti-Fraud: To detect, investigate, and prevent fraudulent activity, money laundering, and other security threats.
• Customer Support: To process and respond to enquiries, complaints and support requests submitted to the selot138 support team.
• Marketing: To send you promotional information, bonus offers, and platform updates via email or SMS – only if you have consented to receiving such communications.
• Legal Compliance: To fulfil the legal and regulatory obligations applicable to Selot138's platform operations in Malaysia.
• Service Improvement: To analyse usage patterns and feedback with the aim of improving platform quality, games and the overall player experience.

We apply different legal bases for each data processing purpose. Most processing is based on contractual necessity (to deliver the services you request), legal obligations, or our legitimate interests in operating a safe and responsible business.

4 Sharing Data with Third Parties

Selot138 does not sell or rent your personal data to any party. However, in the course of operating the platform, we may need to share data with the following categories of third parties, strictly for the purposes stated:

• Payment Providers: Providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and the FPX gateway receive only the minimum transaction data necessary to process your payment securely.
• Game Service Providers: Platform providers for slots, Live Casino and Sports Betting games may receive session data necessary to operate those games correctly.
• Identity Verification Providers: Third-party companies that assist us with KYC processing and document verification to meet compliance requirements.
• Relevant Authorities: Law enforcement agencies or regulatory authorities in Malaysia where required by law or court order.
• Cloud Services & Infrastructure: Server and cloud service providers that store your data in a secure, encrypted environment.

All third parties we work with are bound by strict data protection agreements and are only permitted to use your data for the agreed purposes. selot138 takes responsibility for ensuring these third parties uphold privacy standards equivalent to our own.

5 Data Security Measures

Selot138 continually invests in the latest security infrastructure to ensure your personal data is protected against unauthorised access, loss, misuse or disclosure. The technical and organisational measures we have in place include:

• 256-bit SSL Encryption: All communications between your device and Selot138's servers are encrypted using the latest TLS protocol.
• Strict Access Controls: Only authorised Selot138 staff with a legitimate business need are permitted to access players' personal data.
• 24/7 Monitoring: Our systems are monitored continuously to detect any suspicious or unusual activity.
• Regular Security Audits: Vulnerability assessments and penetration testing are conducted periodically by independent security experts.
• Two-Factor Authentication: Players are encouraged to enable 2FA for an additional layer of protection on their account.
• Data Backup: Data is securely backed up on a regular basis to ensure recovery in the event of a technical emergency.

While we take all reasonable steps to protect your data, no system can guarantee absolute 100% security. We encourage you to take your own precautions as well, such as using a strong password and keeping your login credentials private.

6 Data Retention Period

Selot138 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal requirements. Once the retention period expires, data will be securely deleted or anonymised.

• Active Account Data: Retained for the lifetime of your active account, plus any post-closure retention period required by law.
• Financial Transaction Data: Retained for a minimum of 7 years in accordance with Malaysian financial and tax regulatory requirements.
• Communication Log Data: Customer support records are retained for 2 years for reference and dispute resolution purposes.
• Technical Log Data: System and security logs are retained for 12 months for the purpose of security incident investigations.
• Marketing Data: Retained until you withdraw consent to receive marketing communications.

7 Cookies and Tracking Technologies

Selot138 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies: Required for core platform functions such as login verification, session management and security. These cookies cannot be disabled.
• Performance Cookies: To help us understand how players use the platform through anonymised analytics data for improvement purposes.
• Functional Cookies: Saving your preferences such as language, display settings and location for a more personalised experience.
• Marketing Cookies: Used to display more relevant ads and promotions based on your interests — only with your consent.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of some parts of the selot138 platform.

8 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 and the privacy principles we uphold, you have the following rights regarding your personal data held by Selot138:

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete data.
• Right to Erasure: You have the right to request deletion of your personal data under certain circumstances, subject to any retention obligations required by law.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: You may withdraw consent for specific processing at any time without affecting the validity of any processing that took place prior to your withdrawal.
• Right to Complain: You have the right to lodge a complaint with Malaysia's Personal Data Protection Commissioner if you believe your privacy rights have been violated.

To exercise any of the rights above, please contact Selot138's Data Protection Officer by email at privacy@selot138.my. We will process your request within 21 business days.

9 Protection of Children's Data

Selot138 is an online casino entertainment platform strictly restricted to individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

Should we discover that personal data belonging to an underage individual has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. If you believe your child has registered on our platform, please contact us immediately at privacy@selot138.my so that prompt action can be taken.

10 Changes to This Privacy Policy

Selot138 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or the services we offer.

When significant changes are made, we will notify you via your registered email or a prominent notification on the selot138 platform at least 14 days before the changes take effect. The "Last Updated" date at the top of this document will always reflect the latest version of our Privacy Policy.

Your continued use of the Selot138 platform after any changes take effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes made, please stop using the platform and contact us to close your account.

11 Contact Our Data Protection Officer

Selot138 has appointed a Data Protection Officer responsible for ensuring compliance with this Privacy Policy and handling privacy-related enquiries from players.

• Privacy Email: privacy@selot138.my
• General Support Email: support@selot138.my
• Live Chat: Available 24/7 on the Selot138 platform
• Response Time: Within 21 business days for privacy-related enquiries
• Service Language: Malay and English

We take all privacy-related queries and complaints seriously. If you are not satisfied with our response, you have the right to lodge a complaint directly with the Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital.