Privacy Policy

Introduction

JiliSlot ("we", "us", "our", "the Company") operates the online casino and sports betting platform accessible at jilislot.casa (the "Platform"). We are the data controller responsible for the personal data of players and visitors who interact with the Platform.

This Privacy Policy ("Policy") describes how we collect, use, store, share, and protect your personal data when you register an account, use our Services, or simply browse the Platform. It also describes your rights in relation to that data and how to exercise them.

By accessing or using the Platform, or by creating an account, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree to this Policy, you must discontinue use of the Platform immediately.

This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

Data We Collect

Depending on how you interact with the Platform, we may collect and process the following categories of personal data:

3.1 Identity Data

Full legal name, date of birth, nationality, and government-issued identification document details — including Malaysian IC (MyKad) number, Passport number, or Driver's Licence number — collected as part of the account registration and KYC verification process.

3.2 Contact Data

Email address, mobile phone number, and residential address (including city and postcode). Players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other Malaysian cities are required to provide a valid residential address for KYC purposes.

3.3 Financial Data

Payment method details necessary to process deposits and withdrawals, including e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), bank account information (Maybank, CIMB, Public Bank, RHB, Hong Leong), DuitNow and FPX transaction references, and cryptocurrency wallet addresses (BTC/USDT where applicable). We do not store full card numbers or CVV codes.

3.4 Transaction Data

Records of all financial transactions on your account, including deposit amounts, withdrawal requests, bonus crediting and wagering activity, and the dates and times of each transaction.

3.5 Gameplay Data

Records of your gambling activity on the Platform, including games played, wagers placed, outcomes, session durations, betting patterns, and sportsbook selections — including Liga Super Malaysia, EPL, and other markets.

3.6 Technical Data

IP address, device identifiers, browser type and version, operating system, time zone settings, screen resolution, and cookies or similar tracking identifiers associated with your device and sessions on the Platform.

3.7 Communications Data

Records of communications between you and the Platform's support team via live chat, email, or any other channel — including the content of those communications, timestamps, and resolution outcomes.

3.8 Compliance Data

Documentation submitted for KYC and anti-money laundering purposes, including copies of identity documents, proof of address documents, selfie photographs, and source-of-funds declarations where required.

How We Collect Your Data

We collect personal data through the following channels:

• Direct submission: Data you provide when creating an account, completing KYC, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and similar technologies.
• Third-party sources: Data received from identity verification service providers, payment processors, fraud prevention agencies, and publicly available sources where necessary for compliance purposes.
• KYC document uploads: Identity and address documents submitted directly through the Platform's secure document upload function.

Purposes of Data Processing

We process your personal data for the following specific purposes:

Legal Basis for Processing

We process your personal data under one or more of the following lawful bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions, including account management, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable anti-money laundering regulations, KYC obligations, licensing requirements, and other legal duties.
• Legitimate interests: Processing carried out in pursuit of our legitimate business interests, including fraud prevention, platform security, and responsible gambling monitoring — where those interests are not overridden by your rights and interests.
• Consent: Where you have provided explicit, informed consent for specific processing activities — such as the receipt of marketing communications. You may withdraw consent at any time by contacting the support team or adjusting your account communication preferences.

Data Sharing & Disclosure

JiliSlot does not sell your personal data to any third party. We share personal data only in the following circumstances, and only to the extent necessary for each purpose:

7.1 Service Providers (Data Processors)

We engage third-party service providers who process personal data on our behalf under written data processing agreements. These include payment processors, identity verification providers, fraud detection services, cloud infrastructure providers, and customer support platform operators. All processors are contractually bound to handle data in accordance with applicable data protection standards.

7.2 Regulatory & Law Enforcement Disclosure

We may disclose personal data to regulatory authorities, licensing bodies, law enforcement agencies, tax authorities, or other government bodies where required to do so by applicable law, court order, or in response to a lawful request. We will inform you of such disclosures where we are legally permitted to do so.

7.3 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of assets involving the Company, personal data may be transferred to the relevant successor entity. Affected players will be notified in advance where feasible, and the successor entity will be required to honour the commitments set out in this Policy.

7.4 Responsible Gambling Obligations

Where required by our responsible gambling obligations or licensing conditions, we may share limited player data with self-exclusion scheme operators or problem gambling support organisations. This is done to protect the welfare of players and is conducted under appropriate data sharing agreements.

International Data Transfers

Given the nature of online gaming operations, personal data collected from Malaysian players may be stored on or transferred to servers located outside of Malaysia. Where such transfers occur, we ensure appropriate safeguards are in place — including standard contractual clauses or equivalent data protection mechanisms — to ensure that your data receives a level of protection comparable to that which applies within Malaysia.

By using the Platform, you acknowledge and consent to the transfer of your personal data to countries outside Malaysia as described in this section, where necessary for the provision of our Services.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, compliance, tax, or regulatory obligations. Our standard retention periods are as follows:

• Active account data: Retained for the lifetime of the account plus a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC and compliance documents: Retained for a minimum of five (5) years from the date of submission or the date of the last transaction, whichever is later.
• Transaction and financial records: Retained for a minimum of seven (7) years from the date of each transaction.
• Communications data (support records): Retained for three (3) years from the date of each interaction, unless a longer retention period is required for dispute resolution purposes.
• Marketing consent records: Retained for the duration of the consent and for three (3) years following withdrawal of consent.

Where personal data is no longer required for any lawful purpose, it is securely deleted or anonymised in accordance with our internal data lifecycle procedures.

Cookies & Tracking Technologies

JiliSlot uses cookies and similar tracking technologies to operate certain Platform functions, analyse usage patterns, and deliver a personalised experience. The types of cookies we use are as follows:

You can manage cookie preferences through your web browser settings. Please note that disabling essential cookies may impair the functionality of the Platform, including login and transaction capabilities.

Your Data Rights

Subject to applicable data protection law, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us using the details in Section 16.

We will respond to all valid data rights requests within thirty (30) calendar days of receipt. In complex cases, we may extend this period by a further two months and will notify you accordingly.

Security Measures

JiliSlot implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and our Platform;
• Encrypted storage of sensitive personal and financial data at rest;
• Access controls limiting internal access to personal data on a strict need-to-know basis;
• Two-factor authentication (2FA) available for all player accounts;
• Regular security audits and penetration testing conducted by independent security professionals;
• Incident response procedures for detecting, containing, and notifying affected parties in the event of a data breach.

While we take all reasonable steps to protect your personal data, no online system is entirely immune to risk. You are responsible for maintaining the security of your account credentials and should notify us immediately if you suspect unauthorised access to your account.

Children's Privacy

The Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Age is verified through the mandatory KYC process applicable to all registered accounts.

If we become aware — whether through internal checks, third-party verification, or a report from a third party — that a user is under 21 years of age, we will: (a) immediately suspend the account; (b) void any gameplay conducted by the underage user; (c) return any net deposited funds to the originating payment method; and (d) permanently delete all associated personal data in accordance with applicable obligations.

If you believe a minor has created an account on the Platform, please notify us immediately via the contact details in Section 16.

Third-Party Links

The Platform may contain links to third-party websites or services operated by entities other than JiliSlot. This Privacy Policy applies solely to data collected and processed through the Platform operated at jilislot.casa. We are not responsible for the privacy practices, content, or data handling of any third-party websites, and we encourage you to review the privacy policies of any third-party sites you visit.

Amendments to This Policy

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or our business operations. Any amendments will be published on this page with a revised effective date. Where changes are material, we will notify registered players by email or via a prominent notice on the Platform prior to the changes taking effect.

Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of, and agreement to, the revised terms. We recommend reviewing this Policy periodically to stay informed of how your personal data is being handled.

Contact Us & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly through the Platform — the fastest way to reach us.
• Email: [email protected] (plain text — not a clickable link)
• Help Centre: Visit our FAQ page for answers to common questions about data and privacy.

We aim to acknowledge all data-related enquiries within 48 hours and to provide a substantive response within 30 calendar days. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.