Privacy Policy

This Privacy Policy ("Policy") describes how SlotKaya ("SlotKaya", "we", "us", "our"), the operator of the online gaming platform at https://slotkaya.cam ("Platform"), collects, uses, stores, shares, and protects the personal data of individuals who register an account, visit our Platform, or otherwise interact with our services ("you", "Player", "User").

We are committed to handling your personal data responsibly, transparently, and in compliance with applicable data protection laws. This Policy should be read alongside our Terms & Conditions, which govern your use of the SlotKaya Platform, and our Responsible Gambling Policy.

By registering an Account on the SlotKaya Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the Platform.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person. This includes names, identification numbers, location data, online identifiers, and any other factors specific to a person's physical, physiological, genetic, mental, economic, cultural, or social identity.
• "Processing" means any operation performed on personal data, whether by automated or manual means, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, SlotKaya.
• "Data Processor" means a third party that processes personal data on behalf of a data controller under contractual instruction.
• "KYC Documents" means government-issued identity documents, proof of address, payment method verification, and related materials submitted for identity verification purposes.
• "Cookies" means small text files placed on your device by the Platform to enable session management, functionality, and analytics.
• "Marketing Communications" means promotional emails, SMS messages, push notifications, or in-Platform messages relating to bonuses, offers, or events.

SlotKaya collects the following categories of personal data from Players:

3.1 Registration Data

When you create an Account on the SlotKaya Platform, we collect the information you provide, including your full legal name, date of birth, nationality, email address, mobile telephone number, and preferred username.

3.2 Identity Verification (KYC) Data

To comply with our regulatory obligations and process withdrawals, we collect identity verification documents, which may include copies of your Malaysian MyKad, passport, or driving licence; proof of address documents (utility bills, bank statements, or official government correspondence dated within the last three months); selfie photographs; and proof of ownership of payment methods used.

3.3 Financial Data

We collect records of deposits, withdrawal requests, transaction history, and the payment methods used, including e-wallet account references (Touch 'n Go, Boost, GrabPay), bank account details, FPX transaction references, DuitNow transfer identifiers, and cryptocurrency wallet addresses where applicable. We do not store complete credit or debit card numbers.

3.4 Gameplay & Wagering Data

We collect detailed records of all game sessions, including games played, bet amounts, win and loss outcomes, bonus usage, wagering progress, and session duration. This data is essential for dispute resolution, fraud prevention, and responsible gambling monitoring.

3.5 Technical & Device Data

We automatically collect technical information when you access the Platform, including your IP address, browser type and version, operating system, device type and identifiers, screen resolution, time zone, referring URLs, and pages visited within the Platform.

3.6 Communications Data

We retain records of all communications between you and SlotKaya, including live chat transcripts, email correspondence, and support tickets, for quality assurance, training, dispute resolution, and regulatory compliance purposes.

SlotKaya collects personal data through the following means:

• Directly from you: Information you submit during Account registration, KYC verification, deposit and withdrawal requests, completion of responsible gambling assessments, and communications with our support team;
• Automatically: Technical and device data collected by our Platform infrastructure, including web server logs, cookies, and session tracking technologies when you access and interact with the Platform;
• From payment processors: Transaction confirmation and status data received from Malaysian payment providers including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency network processors;
• From identity verification services: Verification status and risk signals from third-party KYC and AML screening services engaged by SlotKaya to fulfil its regulatory obligations;
• From fraud prevention services: Risk scoring and device fingerprinting data from third-party fraud detection partners to protect the integrity of the Platform.

We process your personal data for the following purposes:

5.1 Account Management

To create, maintain, and administer your Account; verify your identity; process login requests; manage Account security; and facilitate password recovery.

5.2 Service Delivery

To provide access to games, process deposits and withdrawals, calculate and credit bonuses, maintain wagering records, and deliver all other features of the SlotKaya Platform.

5.3 Regulatory Compliance

To fulfil our obligations under applicable anti-money laundering (AML) laws, Know Your Customer (KYC) requirements, and any other regulatory obligations imposed by the jurisdiction in which we operate. This includes screening against sanctions lists and reporting obligations.

5.4 Fraud Prevention & Security

To detect, investigate, and prevent fraudulent activity, unauthorised Account access, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms and Conditions.

5.5 Responsible Gambling

To monitor gameplay patterns and identify indicators of problem gambling behaviour; to operate and enforce self-exclusion requests, deposit limits, and cooling-off periods; and to fulfil our duty of care obligations toward players.

5.6 Customer Support

To respond to your enquiries, resolve disputes, process complaints, and maintain records of communications for quality assurance and training purposes.

5.7 Marketing & Communications

To send you promotional communications about bonuses, new games, and special offers where you have given your prior consent. You may withdraw consent to marketing communications at any time without affecting the lawfulness of prior processing.

5.8 Platform Improvement

To analyse usage patterns, diagnose technical issues, test new features, and improve the overall performance and user experience of the SlotKaya Platform through aggregated and anonymised analytics data.

We process your personal data on the following legal bases:

• Contract performance: Processing necessary to perform our contractual obligations to you under the Terms and Conditions, including Account management, service delivery, and payment processing;
• Legal obligation: Processing required to comply with applicable laws, including KYC, AML, and regulatory reporting obligations;
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights;
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily in respect of marketing communications.

SlotKaya does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary and for the purposes described in this Policy:

7.1 Payment Service Providers

We share transaction data with payment processors necessary to facilitate deposits and withdrawals, including Malaysian payment network operators (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX), Malaysian banking institutions (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency network processors. Data shared is limited to transaction details necessary for payment processing.

7.2 Identity Verification & KYC Providers

We share KYC document data with licensed third-party identity verification service providers engaged to assist us in fulfilling our regulatory obligations. These providers are bound by contractual data processing agreements that restrict their use of your data.

7.3 Fraud Prevention Services

We share device and behavioural data with third-party fraud detection providers to identify and prevent fraudulent activity on the Platform. This sharing is carried out under our legitimate interests in maintaining Platform security.

7.4 Regulatory Authorities

We may be required by law to disclose personal data to regulatory authorities, law enforcement agencies, financial intelligence units, or courts. Such disclosures are made only to the extent required by law and, where permissible, we will inform you that such a disclosure has been requested.

7.5 Group Companies

We may share personal data with affiliated companies within the SlotKaya group for internal administrative purposes, provided that such entities are bound by equivalent data protection obligations.

SlotKaya retains your personal data for as long as necessary to fulfil the purposes described in this Policy and to comply with our legal obligations. The following general retention principles apply:

• Account data and KYC documents: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, as required by AML and regulatory retention obligations;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with applicable financial record-keeping requirements;
• Gameplay records: Retained for a minimum of three (3) years following the game session, for dispute resolution and responsible gambling monitoring purposes;
• Customer support records: Retained for two (2) years following the resolution of the relevant support interaction;
• Marketing consent records: Retained for as long as marketing consent is active, plus one (1) year following withdrawal of consent, to demonstrate compliance.

Where personal data is no longer required for any legitimate purpose, it is securely deleted or anonymised in accordance with our internal data disposal procedures.

SlotKaya implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include:

• Encryption in transit: All data transmitted between your device and the SlotKaya Platform is protected using 256-bit SSL/TLS encryption;
• Encryption at rest: Sensitive personal data, including KYC documents and payment information, is encrypted at rest using industry-standard encryption protocols;
• Access controls: Access to personal data is restricted to authorised personnel who require it for legitimate business purposes, governed by role-based access controls;
• Regular security audits: We conduct periodic penetration testing and independent security audits to identify and remediate vulnerabilities;
• Incident response: We maintain a documented data breach response procedure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and relevant authorities as required by applicable law.

While we take all reasonable steps to protect your data, no data transmission over the internet or electronic storage system can be guaranteed as completely secure. You are responsible for keeping your Account credentials confidential and for taking reasonable steps to secure access to your device.

SlotKaya uses cookies and similar technologies on the Platform for the following purposes:

10.1 Essential Cookies

These cookies are strictly necessary for the Platform to function. They enable you to navigate the Platform, maintain your login session, and access secure areas of your Account. Essential cookies cannot be disabled without significantly impairing Platform functionality.

10.2 Analytical Cookies

We use analytics cookies to collect aggregated, anonymised information about how Players use the Platform — including which pages are visited most frequently, where users spend the most time, and how users navigate through the Platform. This information is used solely to improve the Platform's design and performance.

10.3 Functional Cookies

Functional cookies remember your preferences and settings, such as your language preference and notification settings, to provide a more personalised experience on the Platform.

10.4 Security Cookies

We use security cookies to detect fraudulent activity, protect against automated attacks (such as credential stuffing), and maintain the integrity of your Account session.

Subject to applicable law, you have the following rights in respect of your personal data held by SlotKaya. To exercise any of these rights, please contact us via live chat or at [email protected] with a clear description of your request. We will respond within 30 days of receipt.

Please note that certain rights are subject to limitations. For example, we may not be able to delete data that we are legally required to retain. Where we are unable to comply with a request in full, we will explain the reason in our response.

SlotKaya operates a global platform and engages service providers located in various jurisdictions. As a result, your personal data may be transferred to, stored in, or processed in countries outside Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data, including:

• Contractual data processing agreements with all third-party processors that impose data protection obligations equivalent to those in this Policy;
• Transfer only to service providers in jurisdictions that have been assessed as providing adequate data protection standards;
• Implementation of standard contractual clauses or equivalent mechanisms where required by applicable law.

By using the SlotKaya Platform, you acknowledge and consent to the international transfer of your personal data as described in this section.

The SlotKaya Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of our Account registration process.

If we discover that we have inadvertently collected personal data from a person under the age of 21, we will immediately suspend the relevant Account, delete all personal data associated with that Account, and return any deposited funds to the original payment source. All bonus-derived winnings will be forfeited.

If you believe that a minor has registered an Account on our Platform, please contact us immediately at [email protected] so that we may investigate and take appropriate action.

SlotKaya reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or Platform features. When material changes are made, we will notify you by posting a prominent notice on the Platform and, where practicable, by sending a notification to your registered email address.

The "Last Updated" date at the top of this page reflects the most recent revision. We recommend that you review this Policy periodically to remain informed about how we protect your personal data. Your continued use of the Platform following notification of changes constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by SlotKaya, please contact our Data Protection team through any of the following channels:

We take all privacy-related enquiries and complaints seriously and will handle them with the utmost professionalism and confidentiality. If you are not satisfied with our response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.