Privacy Policy

This Privacy Policy ("Policy") describes how GDSlot ("we", "us", "our", "the Platform") collects, processes, stores, and protects personal data relating to individuals ("you", "Player", "User", "Visitor") who access or use the GDSlot platform at gdslot.cam.

GDSlot operates an online casino and sports betting platform serving players across Malaysia, including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other regions. We process personal data in connection with account registration, identity verification, payment processing, gaming activity, customer support, and the provision of our services more broadly.

We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection laws and privacy standards. This Policy explains what data we collect, why we collect it, how we use it, who we may share it with, and what rights you have in relation to your personal data.

By registering an account, making a deposit, or otherwise using the GDSlot platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you should not use the GDSlot platform.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy.

For the purposes of this Policy, the following terms carry the meanings set out below:

GDSlot acts as the Data Controller for all personal data collected and processed through the gdslot.cam platform. As Data Controller, GDSlot determines the purposes for which personal data is collected and the means by which it is processed.

For all data protection-related enquiries, requests, or complaints, you may contact the GDSlot data privacy team at the email address provided in Section 16 of this Policy. GDSlot is committed to responding to all legitimate data-related requests within a reasonable timeframe.

Where GDSlot engages third-party service providers to process personal data on its behalf (for example, payment processors or identity verification providers), those parties act as Data Processors under written contractual obligations and may not use your personal data for any purpose other than those specified by GDSlot.

GDSlot collects personal data through several channels, including account registration, payment transactions, gaming activity, customer support interactions, and general platform usage. The categories of personal data we collect are detailed below:

GDSlot does not collect sensitive personal data categories (such as health data, biometric data, or racial/ethnic origin information) beyond what is strictly necessary for identity verification or responsible gambling compliance purposes. We do not knowingly collect personal data from individuals under the age of 21.

GDSlot uses your personal data for the following specific purposes, all of which are necessary for the proper operation of the platform and the fulfilment of our obligations to registered players:

GDSlot processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary for the performance of a contract with you — specifically, the provision of online casino and betting services under our Terms & Conditions.
• Legal Obligation: Processing is required to comply with applicable legal obligations, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and responsible gambling obligations.
• Legitimate Interests: Processing is necessary for GDSlot's legitimate business interests, such as fraud prevention, platform security, and improving our services, provided such interests are not overridden by your privacy rights.
• Consent: For certain processing activities — in particular, marketing communications and the use of non-essential cookies — we rely on your express consent, which you may withdraw at any time.

Where consent is the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

GDSlot does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with third parties only in the following limited and specific circumstances:

GDSlot primarily serves Malaysian players and processes personal data within the context of its Malaysia-focused operations. However, some of our third-party service providers — including technology infrastructure and payment processing partners — may be located in jurisdictions outside Malaysia.

Where personal data is transferred outside of Malaysia to a third-party processor, GDSlot takes reasonable steps to ensure that adequate protections are in place, including:

• Entering into contractual agreements with third parties that impose data protection obligations equivalent to those applicable under this Policy.
• Transferring data only to jurisdictions that provide an adequate level of data protection in GDSlot's assessment.
• Ensuring that all international data transfers are necessary for the specific processing purposes described in this Policy.

If you have questions about the international transfer of your personal data, please contact our support team using the contact details provided in Section 16.

GDSlot retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as required by applicable legal obligations. The following general retention principles apply:

• Active Account Data: Personal data associated with an active player account is retained for the full duration of the account relationship and for a defined period following account closure.
• Financial Transaction Records: Records of deposits, withdrawals, and related financial transactions are retained for a minimum period as required under applicable anti-money laundering legislation.
• KYC and Identity Documents: Identity verification documents are retained for the period required under applicable regulatory frameworks, typically a minimum of five years from the date of verification.
• Customer Support Communications: Support correspondence is retained for a period sufficient to resolve any related disputes and for quality assurance review purposes.
• Marketing Data: Marketing communication preferences and related data are retained until you withdraw consent or request deletion, at which point marketing records will be updated accordingly.

Following expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Some anonymised or aggregated data may be retained indefinitely for analytical and statistical purposes.

GDSlot uses cookies and similar tracking technologies to operate, maintain, and improve the platform. Cookies are small data files stored on your device by your web browser. They enable essential platform functionality and help us understand how the platform is being used.

The categories of cookies used on GDSlot are as follows:

Most modern web browsers allow you to control cookie settings through the browser's privacy or settings menu. Disabling essential cookies may impair the functionality of the GDSlot platform. Withdrawing consent for non-essential cookies can be done at any time through your browser settings or account preferences.

GDSlot implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the GDSlot platform is encrypted in transit using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Sensitive personal and financial data stored on GDSlot's servers is encrypted at rest using appropriate encryption standards.
• Access Controls: Access to personal data is restricted on a need-to-know basis. Staff authorised to access personal data are subject to confidentiality obligations and receive appropriate data protection training.
• Regular Security Audits: GDSlot's technical infrastructure is subject to periodic security assessments to identify and remediate vulnerabilities.
• Intrusion Detection: Automated systems monitor the platform for unauthorised access attempts, unusual activity patterns, and potential security breaches.

While GDSlot takes all reasonable precautions to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account login credentials. If you believe your account has been compromised, please contact GDSlot support immediately.

Subject to applicable data protection law, you have the following rights in relation to your personal data held by GDSlot. To exercise any of these rights, please contact our support team using the contact details in Section 16:

GDSlot will respond to all valid data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reasons for it. GDSlot may request additional information to verify your identity before processing a data rights request.

Please note that certain rights are subject to exceptions. For example, the right to erasure does not apply where retention of your personal data is required by applicable law, such as anti-money laundering or regulatory requirements.

As part of the account registration and KYC process, GDSlot requires all Players to provide proof of age. Date of birth information is collected during registration and verified against government-issued identity documents prior to the processing of any withdrawal or the activation of full account features.

If GDSlot becomes aware, or has reasonable grounds to believe, that personal data has been collected from an individual under the age of 21, the account will be immediately suspended, all associated data will be reviewed, and any funds present in the account will be handled in accordance with our Terms & Conditions.

Parents and guardians who believe that a minor may have registered an account on the GDSlot platform are encouraged to contact our support team immediately for prompt investigation and remediation.

The GDSlot platform does not include links to external third-party websites as a matter of standard policy. However, where any third-party services are referenced or integrated into the platform's operation — such as payment gateways — those services operate under their own privacy policies and terms of service.

GDSlot is not responsible for the privacy practices or content of any third-party services that process data as part of payment transactions or other platform integrations. Players are encouraged to review the privacy policies of any third-party payment providers they use in connection with the GDSlot platform, including Touch 'n Go eWallet, Boost, GrabPay, and the respective privacy frameworks of Malaysian banking institutions such as Maybank, CIMB, Public Bank, and Hong Leong Bank.

GDSlot reserves the right to amend, update, or revise this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. When material amendments are made, GDSlot will update the "Last Updated" date at the top of this page.

Where amendments are considered material — meaning they significantly affect how we process your personal data or materially reduce your rights — GDSlot will provide notice to registered players via their registered email address or through an in-platform notification, providing reasonable advance notice before the changes take effect.

Your continued use of the GDSlot platform following notification of any amendments constitutes your acceptance of the revised Policy. If you do not agree with any amended terms, you should stop using the platform and contact support to arrange account closure in accordance with our Terms & Conditions.

For all privacy-related enquiries, data rights requests, or complaints regarding the handling of your personal data by GDSlot, please contact us through one of the following channels:

When submitting a data rights request, please provide sufficient information to allow us to verify your identity and locate the relevant personal data. GDSlot will process requests submitted by verified account holders only.

GDSlot | gdslot.cam | Data Privacy Team | [email protected] | Available 24/7 | Serving Malaysia — Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam & beyond.