Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how JayaSlot ("we", "us", "our", "the Platform") collects, uses, stores, and discloses personal data obtained from users ("you", "the User", "the Player") who access or use the services available at https://jayaslot.lat (the "Website").

JayaSlot respects your right to privacy and is committed to handling your personal data responsibly and transparently. We process personal data in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, storage limitation, and integrity and confidentiality.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy. By creating a JayaSlot account or using any of our services, you acknowledge that you have read and understood this Policy and agree to the collection and use of your personal data as described herein.

2 Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person. This includes, but is not limited to, name, email address, phone number, payment details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means JayaSlot, being the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on our behalf under a data processing agreement, such as payment service providers and identity verification services.
• "KYC" means Know Your Customer — the identity and age verification process required before we process withdrawals or in response to account security reviews.
• "Cookies" means small text files placed on your device by the Website to store preferences, session information, and usage analytics.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a specified purpose.

3 Data We Collect

JayaSlot collects Personal Data through multiple channels, including account registration, payment transactions, identity verification, platform usage, and direct communications with our support team. The categories of data we collect are summarised below:

We do not knowingly collect sensitive personal data (such as racial or ethnic origin, political opinions, or health data) unless it is strictly necessary for regulatory compliance — for example, problem gambling self-exclusion records maintained under our responsible gambling obligations.

4 How We Use Your Data

JayaSlot uses your Personal Data only for clearly defined, legitimate purposes. We do not process your data in ways that are incompatible with those purposes. The principal uses of your Personal Data are:

• Account Management: To create, maintain, and administer your JayaSlot account, including processing registrations, account updates, and password resets.
• Identity Verification (KYC): To verify your identity and age (21+) prior to processing withdrawals, as required under our licensing obligations and responsible gambling commitments.
• Payment Processing: To process deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and other supported payment methods.
• Service Delivery: To provide access to games, sports betting markets, promotions, and all other features of the JayaSlot platform.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other forms of prohibited conduct.
• Regulatory Compliance: To comply with our obligations under international online gaming licensing requirements and applicable anti-money laundering regulations.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance through our 24/7 live chat and email support channels.
• Personalisation: To tailor your platform experience, including recommending games, offering relevant promotions, and adjusting interface settings based on your preferences and history.
• Marketing Communications: To send you promotional offers, loyalty rewards notifications, and platform updates — but only where you have opted in to receive such communications.
• Responsible Gambling: To monitor gaming patterns for signs of problem gambling, enforce deposit limits and self-exclusion requests, and administer our responsible gambling programme.
• Analytics & Platform Improvement: To analyse aggregated usage data, improve platform performance, and develop new features that better serve our players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia.

5 Legal Basis for Processing

JayaSlot processes your Personal Data on the following legal grounds:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and JayaSlot — including account registration, payment processing, and service delivery. Without this processing, we cannot provide our Services to you.
• Legal Obligation: Certain processing is required to comply with our obligations under international gaming licensing conditions, anti-money laundering regulations, and identity verification requirements. This includes KYC processing and record-keeping obligations.
• Legitimate Interests: We process certain data where it is necessary for our legitimate interests — such as fraud detection, platform security, abuse prevention, and improving our services — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we send marketing communications or deploy non-essential cookies, we do so only with your explicit prior consent. You may withdraw consent at any time without affecting the legality of prior processing.

6 Data Sharing & Disclosure

JayaSlot does not sell, rent, or trade your Personal Data to any third party for their own marketing purposes. We may share your Personal Data only in the following limited circumstances:

• Payment Service Providers: We share financial data with payment processors (including DuitNow operators, FPX gateway providers, and e-wallet platforms such as Touch 'n Go, Boost, and GrabPay) to the extent necessary to process your transactions.
• Identity Verification Providers: We engage specialist KYC service providers to assist with identity and age verification. These providers process your identity documents solely for verification purposes under strict data processing agreements.
• Gaming Software Providers: Certain game performance and session data is shared with game studio partners to facilitate game delivery and resolve technical disputes.
• Regulatory and Law Enforcement Authorities: We may disclose your Personal Data to licensing authorities, financial intelligence units, or law enforcement agencies where required by law or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other illegal activity.
• Professional Advisers: We may share data with our legal advisers, auditors, and compliance consultants where strictly necessary and subject to binding confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, your Personal Data may be transferred as part of that transaction. We will notify affected users in advance of any such transfer.

All third parties with whom we share Personal Data are contractually required to handle it in accordance with applicable data protection principles and to use it only for the specified purposes.

7 Data Retention

We retain your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by our licensing obligations or applicable law.

• Account Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, to satisfy anti-money laundering record-keeping requirements.
• KYC / Identity Documents: Retained for a minimum of five (5) years from the date of verification, or longer if required by regulatory obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer Support Communications: Retained for three (3) years from the date of the last interaction, to facilitate dispute resolution.
• Marketing Preferences: Retained until you withdraw consent or opt out of marketing communications, after which we will retain a minimal suppression record to ensure we honour your preferences.
• Technical and Usage Data: Retained in aggregated, anonymised form for analytical purposes after individual account closure.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data disposal procedures.

8 Cookies & Tracking Technologies

JayaSlot uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session security, and gather analytics data that helps us improve our services.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the operation of the Website, including session authentication, security tokens, and load balancing. These cookies cannot be disabled without affecting core Platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised data about how Users interact with the Platform — such as pages visited, time on page, and error reports. This data helps us identify areas for improvement.
• Functional Cookies: Used to remember your preferences such as language settings, interface customisations, and game history. These cookies improve personalisation but are not essential.
• Marketing Cookies: Used to deliver relevant promotional content based on your browsing behaviour. These cookies are only deployed with your prior consent.

You may control non-essential cookies through your browser settings or by adjusting your cookie preferences within your account dashboard. Please note that disabling certain cookies may affect Platform functionality.

9 Data Security

JayaSlot implements a comprehensive suite of technical and organisational security measures designed to protect your Personal Data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the JayaSlot servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their accounts. Our internal administrative systems require 2FA for all staff access to production data.
• Access Controls: Personal Data is accessible only to authorised personnel who require it for their specific job functions. Access is granted on a strict need-to-know basis and is subject to regular access reviews.
• Data Pseudonymisation: Where possible, personal identifiers are separated from transactional and usage data to reduce the risk of harm in the event of an unauthorised disclosure.
• Regular Security Audits: Our infrastructure undergoes periodic independent security assessments, penetration testing, and vulnerability scans to identify and remediate potential weaknesses.
• Incident Response: We maintain a documented data breach response procedure. In the event of a breach that is likely to result in a high risk to affected individuals, we will notify affected Users without undue delay.

While we take all reasonable precautions, no method of data transmission or electronic storage is entirely secure. We cannot guarantee the absolute security of your Personal Data.

10 Your Rights

Subject to applicable law and certain regulatory restrictions (such as data retention obligations under our licensing requirements), you hold the following rights in respect of your Personal Data held by JayaSlot:

To exercise any of these rights, please contact our data team in writing at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 72 hours and aim to fulfil it within 30 days. In complex cases, we may extend this period by a further 30 days with prior notification.

Please note that certain rights may be restricted where compliance would interfere with our legal obligations — for example, we are required to retain KYC and transaction records for a minimum of five years under our licensing conditions, notwithstanding any erasure request.

11 Protection of Minors

JayaSlot's Services are strictly intended for individuals aged 21 years and above. We do not knowingly collect Personal Data from persons under the age of 21. Our registration process includes age declaration and is supported by mandatory KYC identity verification before withdrawals are processed.

If we become aware that a person under the age of 21 has provided us with Personal Data, we will take immediate steps to close the relevant account, void any transactions, and delete the associated Personal Data from our systems as soon as reasonably practicable.

If you have reason to believe that a minor has registered an account on JayaSlot, please contact our support team immediately via live chat or at [email protected].

12 International Data Transfers

JayaSlot operates internationally and, as a result, your Personal Data may be transferred to, stored in, or processed in countries outside Malaysia. These countries may not have data protection laws that are equivalent in strength to those in Malaysia or the European Union.

Where we transfer your Personal Data internationally, we take steps to ensure that appropriate safeguards are in place to protect it, including:

• Using standard contractual clauses approved by recognised data protection authorities in our agreements with international data processors.
• Ensuring that all international data processors are contractually obligated to implement security measures equivalent to those applied to data processed within Malaysia.
• Conducting transfer impact assessments where required to evaluate the adequacy of protections in destination jurisdictions.

Our primary data infrastructure is maintained in accordance with internationally recognised security standards. Our payment processing partners who handle Malaysian Ringgit (MYR) transactions — including DuitNow, FPX, and major Malaysian banks — process transaction data in accordance with Bank Negara Malaysia's relevant technical standards, independent of JayaSlot's operational systems.

13 Third-Party Services

The JayaSlot Platform may include integrations with third-party services — such as payment gateways, game content providers, analytics tools, and customer support software. When you interact with these third-party components, those service providers may process your Personal Data under their own privacy policies.

JayaSlot is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party service with which you interact in connection with your use of the Platform.

All third-party data processors engaged by JayaSlot are selected with care and are contractually required to implement adequate data protection safeguards. We conduct due diligence on new processors before engagement and review existing processors periodically.

14 Policy Amendments

JayaSlot reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or operational changes. The date of the most recent revision is indicated at the top of this document.

Where changes are material — for example, a new category of data collection or a new purpose for using existing data — we will provide notice on the Platform at least 14 days before the amended Policy takes effect. For minor clarifications that do not affect your rights, we may update the Policy without specific notice.

Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. The current version of this Policy is always available at https://jayaslot.lat/privacy-policy.

15 Contact & Data Enquiries

If you have any questions, concerns, or complaints about this Privacy Policy, or if you wish to exercise any of your data rights, please contact our data team through one of the following channels:

• Email: [email protected] — use subject line "Privacy Enquiry" or "Data Rights Request" for faster routing.
• Live Chat: Available 24 hours a day, 7 days a week via the on-site chat widget. Our team can triage your request and route it to our data team.
• Response Time: We aim to acknowledge all data-related enquiries within 72 hours and to fulfil data rights requests within 30 days.