Privacy Policy
Waslot is committed to protecting the personal information of every player who uses our platform. This Privacy Policy explains in clear terms what data we collect, why we collect it, how we use and protect it, and what rights you hold as a registered player — including players based in Malaysia.
Introduction
This Privacy Policy (the "Policy") is published by waslot, the operator of the online gaming platform accessible at waslot.cam (the "Platform"). This Policy applies to all persons who visit, register on, or otherwise interact with the Platform, including registered players based in Malaysia and other permitted jurisdictions.
Waslot takes the privacy of its users seriously. We are committed to handling personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. This Policy describes:
- The categories of personal data we collect from you, directly and indirectly.
- The purposes for which that data is processed and the legal basis for each purpose.
- The circumstances in which we may share your data with third parties.
- The measures we take to keep your data secure.
- The rights you hold in respect of your personal data and how to exercise them.
By accessing or using the waslot Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference. If you do not agree with the terms of this Policy, please discontinue use of the Platform immediately.
Definitions
For the purposes of this Policy, the following definitions apply:
| Term | Meaning |
|---|---|
| Personal Data | Any information relating to an identified or identifiable natural person — directly or indirectly — including name, identification number, location data, and online identifiers. |
| Processing | Any operation performed on personal data, whether automated or manual, including collection, recording, storage, adaptation, retrieval, use, disclosure, and deletion. |
| Data Controller | The entity that determines the purposes and means of processing personal data. For all data collected through the waslot Platform, the Data Controller is waslot. |
| Data Processor | A third party that processes personal data on behalf of the Data Controller under contractual instruction, such as a payment gateway provider or cloud hosting partner. |
| Player | Any individual who has created a registered Account on the waslot Platform. |
| KYC | Know Your Customer — the identity verification process required to confirm a Player's identity before processing withdrawals or in connection with anti-money laundering obligations. |
| Cookies | Small text files placed on a user's device by a website for the purposes of session management, preference retention, or analytics tracking. |
| Sensitive Data | A subset of personal data warranting heightened protection, including government identification numbers, financial account details, and biometric data. |
Data We Collect
Waslot collects personal data through multiple channels, including directly from you at the point of registration or account management, automatically through your use of the Platform, and from third-party sources in connection with payment processing and regulatory compliance.
3.1 Data Provided Directly by You
| Data Category | Specific Data Points | Collection Trigger |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender | Account registration, KYC verification |
| Contact Data | Email address, mobile phone number, residential address | Account registration, support enquiries |
| Document Data | MyKad (for Malaysian players), passport, utility bill, bank statement | KYC verification prior to first withdrawal |
| Financial Data | Payment method details (e-wallet IDs, bank account reference numbers), transaction history, deposit and withdrawal amounts in MYR or cryptocurrency equivalent | Deposit and withdrawal processing |
| Account Credentials | Username, hashed password, security question responses | Account registration and authentication |
| Support Data | Content of live chat transcripts, WhatsApp messages, and email correspondence with the support team | Customer support interactions |
3.2 Data Collected Automatically
When you access the waslot Platform, we automatically collect the following technical and behavioural data:
- Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and time zone.
- Usage Data: Pages visited, game sessions initiated, duration of sessions, bet history, bonus activity, and navigation patterns within the Platform.
- Location Data: Approximate geographic location derived from your IP address, used for jurisdictional compliance and fraud detection.
- Cookie Data: Session cookies, authentication tokens, and analytics cookies — further described in Section 7 of this Policy.
3.3 Data from Third-Party Sources
We may also receive limited personal data from third parties in the following circumstances:
- Payment processors and e-wallet providers (including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, and FPX operators) may share transaction status and verification data with us as part of the payment processing workflow.
- Identity verification service providers may confirm the authenticity of documents submitted during the KYC process.
- Fraud detection and anti-money laundering (AML) screening services may provide risk scoring data in connection with account activity reviews.
How We Use Your Data
Waslot processes your personal data only for the specific, legitimate purposes outlined below. We do not use your data for purposes incompatible with those for which it was originally collected without your explicit consent.
| Purpose | Description |
|---|---|
| Account Management | Creating and maintaining your registered Account, authenticating your identity at login, and managing Account settings and preferences. |
| Transaction Processing | Processing deposits and withdrawals via Malaysian payment methods and cryptocurrency channels, including reconciling transactions and resolving payment disputes. |
| KYC & Compliance | Verifying your identity and age (21+ requirement), fulfilling AML and counter-terrorism financing (CTF) obligations, and complying with the conditions of our gaming licence. |
| Customer Support | Responding to your enquiries, complaints, and support requests submitted via live chat, WhatsApp, or email. |
| Platform Security | Detecting and preventing fraud, bonus abuse, multi-accounting, money laundering, and other prohibited conduct. |
| Responsible Gambling | Monitoring gaming behaviour to identify potential problem gambling indicators, administering deposit limits, loss limits, cool-off periods, and self-exclusion requests. |
| Product Improvement | Analysing aggregated and anonymised usage data to improve Platform features, game availability, payment infrastructure, and user experience — particularly for our core Malaysian player base. |
| Marketing Communications | Sending promotional communications about waslot offers, bonuses, and new features where you have provided consent or where we have a legitimate interest. You may opt out at any time. |
| Legal Obligations | Complying with applicable laws, regulatory directions, court orders, and the conditions of our gaming and operating licences. |
Legal Basis for Processing
Waslot processes your personal data on one or more of the following legal bases, depending on the specific processing activity in question:
- Contractual Necessity: Processing that is necessary to fulfil our contractual obligations to you under the Terms and Conditions, including account management, game access, and payment processing.
- Legal Obligation: Processing required to comply with applicable regulatory requirements, including KYC verification, AML screening, age verification (21+), and gaming licence conditions.
- Legitimate Interests: Processing carried out in pursuit of legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and product analytics — provided that such interests are not overridden by your rights and freedoms.
- Consent: Where we rely on consent as the legal basis for processing (primarily in connection with optional marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of consent does not affect your Account registration or access to core Platform services.
Data Sharing & Disclosure
Waslot does not sell, rent, or otherwise commercialise your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate contractual data protection obligations:
6.1 Payment Service Providers
In order to process deposits and withdrawals, we share relevant transaction data with Malaysian payment service providers including the operators of Touch 'n Go eWallet, Boost (Axiata), GrabPay, DuitNow, FPX, and major Malaysian banks (Maybank, CIMB, Public Bank, and Hong Leong Bank). For cryptocurrency transactions, relevant wallet address and transaction hash data is processed by blockchain networks, which are inherently public and decentralised.
6.2 Identity Verification Providers
KYC document verification is conducted with the assistance of third-party identity verification service providers. These providers process identity documents (including MyKad for Malaysian players) under strict contractual data protection obligations and may not use your data for any purpose beyond the verification service.
6.3 Regulatory Authorities and Law Enforcement
We may disclose personal data to gaming regulatory authorities, financial intelligence units, law enforcement agencies, or courts of competent jurisdiction where we are legally required or compelled to do so. We will endeavour to provide advance notice of any such disclosure to the relevant Player to the extent permitted by law.
6.4 Technology and Infrastructure Partners
We use third-party cloud hosting, content delivery, analytics, and cybersecurity services to operate the Platform. These providers act as Data Processors under contractual instruction and are subject to binding data protection agreements limiting their use of your data to the provision of the contracted service.
Cookies & Tracking Technologies
Waslot uses cookies and similar tracking technologies on the Platform to support core functionality, enhance user experience, and gather analytical data. Your continued use of the Platform following notice of our cookie use constitutes your acceptance of cookies, subject to your browser or device settings.
7.1 Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Essential for Platform operation — including session authentication, security tokens, and maintaining your logged-in state across page navigations. | Session |
| Functional | Remembering your language preference, display settings, and game lobby view configuration for a more personalised experience. | Up to 12 months |
| Analytical | Collecting anonymised data on how players navigate the Platform, which features they use, and where technical issues occur — used to improve the product for our Malaysian player community. | Up to 24 months |
| Security | Detecting and preventing fraudulent login attempts, bot activity, and other security threats, including IP reputation tracking and device fingerprinting signals. | Up to 12 months |
7.2 Managing Cookies
You may manage or disable cookies through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform, including logging into your Account. Instructions for managing cookies are available in the help documentation for all major browsers. Waslot does not currently respond to browser Do Not Track (DNT) signals.
Data Retention
Waslot retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our gaming licence obligations. The following indicative retention periods apply:
- Active Account Data: Retained for the duration of the active Account relationship, plus a minimum of five (5) years following Account closure to satisfy AML, tax, and regulatory record-keeping obligations.
- KYC Documentation: Retained for a minimum of five (5) years from the date of verification, as required under standard gaming licence compliance frameworks.
- Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, consistent with financial record-keeping obligations applicable to internationally licensed gaming operators.
- Support Correspondence: Retained for up to three (3) years from the date of the interaction, for quality assurance, dispute resolution, and regulatory review purposes.
- Marketing Consent Data: Retained until you withdraw your consent, plus a reasonable administrative period to process the withdrawal request.
- Analytical and Usage Data: Retained in anonymised or aggregated form for up to three (3) years for product improvement purposes. De-identified data may be retained indefinitely.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.
Data Security
Waslot implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- Transport Layer Security (TLS 1.3): All data transmitted between your browser or device and the waslot Platform is encrypted using 256-bit TLS encryption, providing bank-grade protection for data in transit.
- Encryption at Rest: Sensitive personal data, including financial information and KYC documentation, is encrypted in storage using industry-standard encryption protocols.
- Access Controls: Access to personal data within the Company is restricted on a strict need-to-know basis. Employees and contractors with access to personal data are subject to confidentiality obligations and regular training on data protection practices.
- Intrusion Detection and Prevention: Continuous monitoring systems, web application firewalls, and intrusion detection tools are deployed to detect and respond to security threats in real time.
- Two-Factor Authentication: Additional authentication layers are available for Player Accounts to reduce the risk of unauthorised access.
- Regular Security Audits: Third-party security assessments and penetration testing are conducted periodically to identify and remediate vulnerabilities in the Platform infrastructure.
Your Rights
As a data subject, you hold the following rights in respect of the personal data that waslot holds about you. To exercise any of these rights, please contact our Data Privacy team using the details provided in Section 15 of this Policy. We will respond to all legitimate requests within 30 calendar days.
Right of Access
You have the right to request a copy of the personal data we hold about you, along with information on how it is being processed. This is commonly known as a Subject Access Request (SAR).
Right to Rectification
You have the right to request correction of any inaccurate or incomplete personal data we hold. You may update certain Account information directly through your Account settings.
Right to Erasure
You have the right to request deletion of your personal data in certain circumstances. This right is subject to our legal and regulatory retention obligations — we cannot delete data we are required to retain under applicable law.
Right to Restriction
You may request that we restrict the processing of your personal data in specific circumstances, such as where you contest the accuracy of the data or object to its processing.
Right to Data Portability
Where processing is based on your consent or contractual necessity, you may request a structured, machine-readable copy of your personal data for transfer to another service provider.
Right to Object
You may object to processing carried out on the basis of legitimate interests, including profiling for direct marketing purposes. You may opt out of marketing communications at any time through your Account settings or by contacting support.
Third-Party Services
The waslot Platform integrates with a number of third-party services to deliver core functionality. These include game content providers, payment gateway operators, live dealer studio providers, analytics platforms, and infrastructure partners. Each third-party integration is governed by contractual agreements that bind the third party to data protection standards consistent with this Policy.
Game content providers (such as Pragmatic Play, Evolution Gaming, PG Soft, and JDB, among others) may process limited technical session data as part of game delivery. This data is typically pseudonymised and does not include your full identity details. These providers are independent data controllers in respect of their own products and are subject to their own privacy policies and gaming certification obligations.
Waslot is not responsible for the privacy practices of websites or services linked from the Platform, where such external links are present. This Policy applies exclusively to data collected through the waslot Platform and does not extend to third-party websites or services.
Minors & Age Verification
Waslot's services are strictly intended for persons aged 21 years and above. We do not knowingly collect personal data from individuals under this age. Age verification is a mandatory component of our KYC process, and any Account discovered to have been registered by a person under the age of 21 will be immediately suspended and all associated data reviewed in accordance with our legal obligations.
If you believe that we may have inadvertently collected personal data from a minor, please contact us immediately at the address provided in Section 15. We will promptly investigate and, where confirmed, delete the relevant data and close the associated Account.
International Data Transfers
As an internationally operated online gaming platform, waslot may transfer your personal data to countries outside of Malaysia in connection with the delivery of Platform services. Such transfers may occur in connection with cloud hosting infrastructure, game content delivery networks, payment processing systems, and regulatory compliance obligations under our gaming licence.
Where personal data is transferred internationally, we ensure that appropriate safeguards are in place, which may include:
- Standard contractual clauses or equivalent data transfer agreements binding the recipient to data protection obligations consistent with internationally recognised standards.
- Processing within jurisdictions that have been determined to provide an adequate level of data protection.
- Binding corporate rules where the recipient is a member of the same corporate group as waslot.
You acknowledge and accept that your personal data may be processed in jurisdictions outside Malaysia whose data protection laws may differ from those applicable in your country of residence. In all cases, we take reasonable steps to ensure your data is protected to standards equivalent to those described in this Policy.
Policy Amendments
Waslot reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our business practices, or the functionality of the Platform. Material changes to this Policy will be communicated to registered Players via:
- An email notification to the address associated with your registered Account, and/or
- A prominent notice displayed on the Platform homepage, with a minimum of seven (7) calendar days' advance notice before the revised Policy takes effect.
The effective date displayed at the top of this page reflects the date on which the current version of this Policy came into force. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the revised terms, you should cease using the Platform and contact our support team to arrange account closure.
Contact & Complaints
If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which waslot processes your personal data, please contact our Data Privacy team through the channels below. We are committed to handling all privacy-related enquiries with professionalism and discretion.
If you are dissatisfied with our handling of a privacy complaint and wish to escalate the matter, you may do so in accordance with the dispute resolution procedures set out in our Terms & Conditions. All formal privacy complaints submitted in writing will be acknowledged within 48 hours and substantively responded to within 14 business days.
How We Protect Your Data
Six principles that guide how waslot handles your personal information — every day, for every player.
We Never Sell Your Data
Your personal information is never sold, rented, or licensed to any third party for commercial, advertising, or marketing purposes. Data is shared only where operationally necessary and under binding confidentiality agreements.
256-Bit Encryption
All data in transit between your device and waslot servers is protected by TLS 1.3 encryption. Sensitive data at rest — including financial records and KYC documents — is stored using industry-standard encryption protocols.
Minimum Data Collection
We collect only the data we genuinely need to operate the Platform, process payments, fulfil regulatory obligations, and support your Account. We do not collect excessive or unnecessary personal information.
Your Rights, Respected
Access, rectification, erasure, portability, restriction, and objection rights are all honoured. Submit a data request to our privacy team and receive a substantive response within 30 calendar days.
Clear Retention Schedules
We retain personal data only for as long as operationally and legally necessary. Account data is held for up to five years post-closure to satisfy AML obligations; analytical data is anonymised on a rolling basis.
Regular Security Audits
Waslot's platform infrastructure undergoes regular third-party penetration testing and security assessments. Our security posture is reviewed and updated continuously as the threat landscape evolves.
Your Privacy. Our Priority.
Waslot is built on trust — and trust starts with handling your personal data with the care and transparency it deserves. Explore the Platform knowing your information is protected at every step.
Questions about your data? Contact us at [email protected] — we respond within 24 hours.