Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is issued by sgpslot ("sgpslot", "we", "us", "our") and applies to all personal data collected from individuals ("you", "the Player", "the User") who access, register with, deposit to, or otherwise interact with the sgpslot platform, including via sgpslot.cam and any associated service interfaces.

sgpslot is an English-language online entertainment platform serving Malaysian adults aged 21 and above. We are committed to handling personal information fairly, securely, and in a manner consistent with internationally recognised data protection principles, including purpose limitation, data minimisation, storage limitation, and security.

By registering a Player Account, making a deposit, or continuing to use the sgpslot platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy and the practices it describes. If you do not agree with any part of this Policy, you should discontinue use of the platform.

2 Definitions

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably identify a natural person, whether directly or in combination with other available data.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means sgpslot, the entity that determines the purposes and means by which personal data is processed.
• "Data Processor" means a third-party service provider that processes personal data on behalf of sgpslot under a contractual arrangement.
• "KYC" means Know Your Customer — the identity, age, and source-of-funds verification process applied to Player Accounts.
• "Cookies" means small text files placed on a user's device by a website to store session state, preferences, and analytical information.
• "Player Account" means a registered, verified account held in an individual's name on the sgpslot platform.

3 Data We Collect

sgpslot collects personal data in three principal ways: directly from you upon registration or when you interact with support; automatically through platform usage; and from third-party verification or payment service providers.

3.1 Registration and Account Data

When you create a Player Account, we collect: full legal name, date of birth, residential address, email address, mobile telephone number, and preferred MYR payment method details. This data is required to establish and maintain your account.

3.2 Identity Verification Data

As part of KYC compliance, sgpslot may collect copies of government-issued identity documents (such as a Malaysian MyKad or passport), proof of residential address, and where applicable, source-of-funds documentation. This data is processed solely for verification and compliance purposes.

3.3 Financial Transaction Data

sgpslot records all deposits and withdrawals processed through approved MYR payment methods, including Touch'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and USDT TRC20 transactions. Transaction records include amounts, timestamps, payment method identifiers, and status information.

3.4 Platform Usage Data

We automatically collect technical data about how you use the platform, including: IP address, device type, browser type and version, operating system, pages visited, game sessions initiated, betting history, session duration, and approximate geolocation (country and city level). This data helps us maintain service quality and detect unusual activity.

3.5 Communications Data

Where you contact sgpslot customer support — via email or live chat — we retain records of those communications, including the content of messages, timestamps, and any account identifiers provided, for service quality and dispute resolution purposes.

3.6 Summary Data Table

4 Legal Basis for Processing

sgpslot processes personal data on the following legal bases:

• Contractual necessity — processing required to fulfil our obligations under the Player Account agreement, including account creation, deposits, withdrawals, and game access.
• Legal obligation — processing required to comply with applicable anti-money-laundering principles, age verification requirements, and international licensing obligations, including KYC procedures.
• Legitimate interests — processing necessary for fraud prevention, platform security, abuse detection, and service quality improvement, where such interests are not overridden by your fundamental rights.
• Consent — where you have provided specific, informed consent for optional processing activities such as marketing communications. Consent can be withdrawn at any time without affecting other processing activities.

5 How We Use Your Data

Personal data collected by sgpslot is used exclusively for the following purposes:

• Creating, managing, and maintaining your Player Account, including password resets and account notifications.
• Processing MYR deposits and withdrawals through approved payment channels, including reconciliation with payment service providers.
• Conducting KYC checks and verifying age eligibility (21+ requirement) before granting access to real-money gaming features.
• Detecting, investigating, and preventing fraud, unauthorised account access, bonus abuse, and money-laundering activity.
• Providing customer support and resolving account-related disputes, including communications via the support email.
• Sending transactional notifications relating to deposits, withdrawals, and account changes.
• Administering responsible gambling tools including deposit limits, session reminders, and self-exclusion programmes.
• Improving platform performance, navigation, and game availability based on aggregated, anonymised usage analytics.
• Sending optional promotional communications where you have provided consent, and honouring opt-out requests promptly.

6 Data Sharing

sgpslot does not sell, rent, or trade personal data to third-party marketers. Data may be shared in the following circumstances:

6.1 Payment Service Providers

Transaction data is shared with approved MYR payment partners — including e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), bank transfer processors (Maybank, CIMB, Public Bank, Hong Leong Bank), DuitNow/FPX intermediaries, and cryptocurrency settlement services — solely for the purpose of processing the relevant transaction.

6.2 KYC Verification Partners

Identity documents and verification data may be transmitted to third-party KYC verification providers for document authentication and screening purposes. These providers process data under contractual obligations equivalent to those set out in this Policy.

6.3 Platform and Infrastructure Providers

sgpslot uses third-party hosting, cloud infrastructure, analytics, and security services. These providers act as Data Processors and are contractually restricted from using platform data for any purpose beyond the specific service they provide.

6.4 Legal and Regulatory Disclosure

sgpslot may disclose personal data to applicable authorities or legal bodies where required by a binding legal obligation, court order, or in response to a legitimate regulatory investigation. In such cases, disclosure is limited to the minimum data required.

6.5 Business Transfers

In the event of a merger, acquisition, or transfer of substantially all platform assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections and prior notification to affected players where practicable.

7 Data Retention

sgpslot retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required to meet applicable legal, compliance, or dispute-resolution obligations.

• Active accounts — personal and transaction data is retained for the duration of the account relationship.
• Closed accounts — account records and transaction histories are typically retained for a minimum of five (5) years following account closure to satisfy anti-money-laundering record-keeping standards.
• KYC documents — identity verification records are retained for the period required by applicable international compliance frameworks, generally a minimum of five (5) years.
• Support communications — customer service records are retained for a period of two (2) years following resolution of the relevant interaction.
• Analytics data — aggregated, anonymised analytics are retained indefinitely; individually identifiable session data is anonymised or deleted within twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual.

8 Security Measures

sgpslot implements proportionate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, and unlawful disclosure. These measures include:

• Encryption of data in transit using industry-standard TLS protocols.
• Encryption or hashing of sensitive data fields at rest, including account credentials.
• Access controls restricting data access to authorised personnel on a need-to-know basis.
• Regular security assessments and penetration testing of platform infrastructure.
• Fraud monitoring systems that flag unusual account and transaction patterns for human review.
• Staff training on data handling obligations and incident response procedures.

While sgpslot takes reasonable steps to protect your data, no internet-based service can guarantee absolute security. Players are responsible for maintaining the confidentiality of their own login credentials and should contact support immediately if they suspect unauthorised access to their account.

9 Cookies Policy

sgpslot uses cookies and similar tracking technologies to operate and improve the platform. By continuing to use the platform after a cookie notice has been displayed, you acknowledge the use of cookies as described below.

9.1 Types of Cookies Used

9.2 Managing Cookies

You may configure your browser to block or delete cookies. Note that disabling essential cookies will impair your ability to log in or use core platform features. Disabling analytical cookies will not affect your access to game or payment functions.

9.3 No Third-Party Advertising Cookies

sgpslot does not deploy third-party advertising or retargeting cookies on the platform. Analytical data collected via cookies is processed internally or via contracted analytics providers and is not used for third-party advertising profiling.

10 Your Rights

Subject to applicable limitations and our legal obligations, you have the following rights in relation to your personal data held by sgpslot:

• Right of Access — you may request a copy of the personal data we hold about you and information about how it is processed.
• Right to Rectification — you may request correction of inaccurate or incomplete personal data records.
• Right to Erasure — you may request deletion of your personal data in circumstances where it is no longer necessary for the stated purpose, provided no overiding legal retention obligation applies.
• Right to Restriction — you may request that processing of your data be temporarily restricted while accuracy or legitimacy is being assessed.
• Right to Object — you may object to processing based on legitimate interests grounds, including direct marketing where consent was given.
• Right to Withdraw Consent — where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to Data Portability — where technically feasible and applicable, you may request your personal data in a structured, commonly used format.

To exercise any of the above rights, contact sgpslot via the support email provided in Section 12. Requests will be acknowledged within a reasonable timeframe and fulfilled within thirty (30) days, subject to identity verification requirements. Requests that are manifestly unfounded or excessive may be declined with a written explanation.

11 Minors and Age Protection

The sgpslot platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under 21 years of age. Age verification is a mandatory step before any real-money activity is permitted on a Player Account.

If sgpslot identifies, through KYC procedures or other means, that a registered user is under the required minimum age, the account will be closed immediately, all balances withheld pending investigation, and the personal data associated with that account handled in accordance with applicable child protection principles.

Parents or guardians who believe a minor has registered with sgpslot are encouraged to contact us immediately via the support email. We will investigate and take appropriate action without delay.

12 Contact Us

If you have questions about this Privacy Policy, wish to exercise a data right, or have concerns about how your personal data is being handled, please contact the sgpslot data team:

We aim to acknowledge all privacy-related requests within five (5) business days. Complex access or erasure requests may require identity verification before processing can proceed.