Privacy Policy

This Privacy Policy ("Policy") issued by islot99 ("islot99", "we", "us", "our"), the operator of the online gaming platform accessible at https://islot99.cam. This Policy describes how islot99 collects, processes, stores, shares, and protects the personal data of individuals who visit, register with, or use our platform ("Users", "Players", "you").

islot99 is committed to handling personal data responsibly and in accordance with applicable data protection legislation. We recognise the trust that Malaysian players — whether based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or elsewhere — place in us when they share their personal information, and we take that responsibility seriously.

By registering an account, accessing the islot99 Platform, or transacting through any of our supported Malaysian payment channels — including Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX — you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, either alone or in combination with other data. Examples include your full name, IC number, email address, IP address, and financial account details.
• "Processing" — any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — islot99, which determines the purposes and means by which your personal data is processed.
• "Data Processor" — a third party that processes personal data on behalf of islot99 pursuant to a written data processing agreement, such as payment gateway operators or identity verification service providers.
• "Consent" — a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "Cookies" — small text files placed on your device by the islot99 Platform to facilitate functionality, analytics, and session management.
• "KYC" — Know Your Customer verification, the process by which islot99 confirms the identity of players to prevent fraud, money laundering, and underage access.

islot99 collects personal data in the following categories. The data collected varies depending on the nature of your interaction with the Platform:

islot99 collects personal data through the following channels:

4.1 Direct Collection

You provide data directly when you register an account, complete our KYC verification process, make a deposit or withdrawal via Maybank2u, DuitNow, FPX, or any other supported payment method, contact our customer support team via live chat or email, participate in promotions, or update your account profile.

4.2 Automated Collection

When you access and navigate the islot99 Platform, we automatically collect technical and usage data through cookies, web beacons, server logs, and similar tracking technologies. This data helps us maintain platform security, personalise your experience, and analyse performance patterns.

4.3 Third-Party Sources

In limited circumstances, islot99 may receive personal data about you from third-party sources, including identity verification service providers used in the KYC process, payment processors processing your MYR transactions, fraud prevention databases, and publicly available registers where relevant to regulatory compliance obligations.

islot99 processes your personal data for the following specific and documented purposes:

• Account Creation and Management: To register your account, authenticate your identity at login, maintain your account balance, and manage your account settings and preferences.
• Payment Processing: To process deposits and withdrawals via Malaysian payment methods including Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX. Financial data is processed in MYR (Malaysian Ringgit).
• KYC and Age Verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity in compliance with our obligations to prevent fraud and financial crime.
• Service Delivery: To provide access to casino games, sportsbook markets (including Liga Super Malaysia, EPL, UFC, and other sports), live dealer tables, and all other Platform features.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and deliver support in English, Bahasa Melayu, and Mandarin.
• Responsible Gambling: To implement deposit limits, self-exclusion, and cooling-off periods at your request, and to identify indicators of potential gambling harm as part of our responsible gambling obligations.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and other prohibited conduct as described in our Terms & Conditions.
• Legal and Regulatory Compliance: To comply with applicable laws, regulations, court orders, and requests from authorised regulatory and law enforcement bodies.
• Platform Improvement: To analyse usage patterns, conduct A/B testing, and improve the functionality, performance, and user experience of the islot99 Platform.
• Direct Communications: To send you transactional messages (e.g., deposit confirmations, withdrawal notifications) and, where you have provided consent, promotional communications about offers and bonuses.

islot99 relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing required to perform our contract with you — including account management, payment processing, and service delivery.
• Legal Obligation: Processing necessary to comply with applicable legal and regulatory requirements, including anti-money laundering obligations, KYC requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out for islot99's legitimate business interests where these are not overridden by your privacy rights — including fraud prevention, security monitoring, platform improvement, and responsible gambling monitoring.
• Consent: Processing based on your explicit consent — primarily for optional marketing communications. You may withdraw consent at any time without affecting prior processing.

islot99 does not sell, rent, or trade your personal data. We share personal data only in the following limited and controlled circumstances:

• Payment Service Providers: Your financial data is shared with payment processors necessary to execute your deposits and withdrawals in MYR — including operators of Maybank2u, CIMB Clicks, FPX, DuitNow, Touch 'n Go eWallet, Boost, and GrabPay systems. These processors are bound by contractual data protection obligations and their own regulatory requirements.
• Identity Verification Providers: KYC documents and identity data are shared with licensed identity verification service providers to complete the verification process. These providers are bound by strict confidentiality agreements.
• Fraud Prevention Services: Limited data may be shared with fraud prevention databases and screening services to protect islot99 and its players from financial crime.
• Regulatory and Law Enforcement Bodies: islot99 will disclose personal data to competent authorities where required by applicable law, court order, or legally authorised request. We will notify you of such disclosures where legally permitted to do so.
• Group Companies and Service Providers: Personal data may be shared with entities within the islot99 corporate group and with carefully selected service providers (e.g., IT infrastructure, hosting, analytics) acting as data processors under written agreements that prohibit independent use of your data.

The islot99 Platform uses cookies and similar tracking technologies to operate core functionality, enhance user experience, and gather analytical data. The following categories of cookies are used:

• Essential Cookies: Strictly necessary for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without disrupting Platform functionality.
• Functional Cookies: Allow the Platform to remember your preferences — such as language setting (English, Bahasa Melayu, or Mandarin), preferred game category, and display settings — across sessions.
• Analytics Cookies: Used to collect aggregated and anonymised data about how users interact with the Platform — which pages are visited most frequently, average session duration, and navigation patterns. This data helps us improve the Platform.
• Security Cookies: Used to support fraud detection and security monitoring, including identifying unusual login patterns and flaging potential account compromise.

You may manage cookie preferences through your browser settings. Please note that disabling essential or security cookies may impair your ability to use certain Platform features. Continued use of the islot99 Platform following the display of our cookie notice constitutes acceptance of our cookie usage as described in this section.

islot99 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account's existence on the Platform and for a period of up to 5 years following account closure, to satisfy regulatory, audit, and dispute resolution obligations.
• Financial Transaction Records: Retained for a minimum of 6 years from the date of each transaction, in line with standard financial record-keeping requirements applicable in the gaming and financial services sectors.
• KYC Documents: Retained for a minimum of 5 years from the date of completion of the business relationship, in accordance with anti-money laundering and counter-terrorist financing obligations.
• Customer Support Communications: Retained for 3 years from the date of resolution, to facilitate dispute resolution and quality assurance.
• Technical and Usage Data: Typically retained in aggregated or anonymised form after13 months. Raw individual-level technical data is retained for shorter periods consistent with security and analytics purposes.

Where data is no longer required for any lawful purpose, islot99 will securely delete or anonymise it in accordance with our data destruction procedures.

islot99 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• Encryption: All data transmitted between your browser and the islot99 Platform is protected byTLS 1.3 (256-bit SSL) encryption. Personal data stored in our systems is encrypted using AES-256 encryption at rest.
• Access Controls: Access to systems containing personal data is restricted to authorised islot99 personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Password Security: Passwords are stored using industry-standard one-way cryptographic hashing with salting. islot99 never stores plaintext passwords.
• Security Monitoring: We operate continuous security monitoring, intrusion detection systems, and regular vulnerability assessments to identify and address potential threats.
• Incident Response: islot99 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify affected users in accordance with our obligations under applicable law.

As a data subject, you hold the following rights in relation to the personal data islot99 holds about you. Requests to exercise any of these rights should be submitted to our support team. islot99 will respond to verified requests within a reasonable timeframe, typically within 30 days.