Privacy Policy

This Privacy Policy (the "Policy") is issued by VIPSlot (hereinafter "VIPSlot," "we," "us," or "the Company") and applies to all personal data collected, stored, used, and processed in connection with your use of the website located at vipslot.buzz and all associated services, applications, and platforms operated thereunder (collectively, the "Platform").

VIPSlot operates an online casino and sports betting platform serving players across Malaysia, including those based in Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and other cities throughout the country. The processing of personal data is an inherent part of offering regulated gambling, financial transaction, and account management services. This Policy explains exactly what data is collected, the purposes for which it is used, how long it is retained, and the rights available to you as a data subject.

By registering an account or using any service on the VIPSlot Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not register an account or use the Platform.

The following terms carry the meanings assigned below throughout this Policy:

• "Personal Data" — any information that identifies or can be used to identify a natural person, directly or indirectly, including but not limited to name, identification number, contact details, financial account information, and online identifiers.
• "Processing" — any operation or set of operations performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Subject" — the identified or identifiable natural person to whom the Personal Data relates; in the context of this Policy, this means you, the registered User of VIPSlot.
• "Data Controller" — VIPSlot, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Third Party" — any natural or legal person, public authority, agency, or body that is not the Data Subject or the Data Controller.
• "KYC" — Know Your Customer; the identity and age verification process required before withdrawals and under applicable compliance obligations.
• "Cookies" — small text files placed on your device by the Platform to store information about your session, preferences, and activity.

VIPSlot collects the following categories of personal data in connection with the provision of its services:

VIPSlot does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, except where the processing of such data is strictly required under applicable law (for example, where age verification documents incidentally reveal nationality).

VIPSlot collects Personal Data through the following means:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, including via cookies, web beacons, server logs, and analytics tools.
• Third-Party Sources: Identity verification data received from KYC and anti-fraud service providers; fraud screening data from payment processors such as those facilitating Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Boost, and GrabPay transactions.
• Public Sources: Publicly available information used for fraud and sanctions screening where required by applicable compliance obligations.

VIPSlot processes your Personal Data for the following purposes:

1. Account Management: Creating, maintaining, and managing your player account, including processing deposits and withdrawals in MYR and other supported currencies.
2. Identity and Age Verification: Verifying that you are at least 21 years of age and that the information you have provided is accurate and complete, in compliance with applicable regulations.
3. Anti-Money Laundering (AML) and Fraud Prevention: Screening transactions, account behaviour, and identity information to detect and prevent money laundering, fraud, and other financial crimes.
4. Platform Security: Monitoring access patterns, device fingerprints, and login activity to identify and respond to unauthorised access, account takeovers, and other security incidents.
5. Responsible Gambling: Monitoring wagering patterns and account activity to identify markers of gambling harm and to facilitate the exercise of responsible gambling tools including deposit limits, session reminders, cooling-off periods, and self-exclusion.
6. Customer Support: Responding to enquiries, complaints, and disputes via live chat and email.
7. Marketing and Promotions: Where you have opted in to marketing communications, sending you information about promotions, bonuses, and platform updates. You may withdraw consent to marketing communications at any time.
8. Legal and Regulatory Compliance: Fulfilling obligations under applicable gaming, financial services, and data protection laws, including responding to lawful requests from regulatory authorities.
9. Platform Improvement: Analysing aggregated and anonymised usage data to improve the performance, design, and features of the Platform.

VIPSlot relies on the following legal bases for the processing of your Personal Data:

• Contractual Necessity: Processing required to perform the contract between you and VIPSlot (i.e., to provide the gambling and betting services you have registered to use), including payment processing, account management, and KYC verification.
• Legal Obligation: Processing required to comply with applicable laws, regulations, and the lawful instructions of regulatory and enforcement authorities, including AML obligations, fraud reporting, and age verification requirements.
• Legitimate Interests: Processing for purposes of fraud prevention, platform security, responsible gambling monitoring, and the improvement of our services, where our legitimate business interests are not overridden by your fundamental rights.
• Consent: Processing for marketing and promotional communications, where you have provided explicit consent. Consent may be withdrawn at any time without prejudice to the lawfulness of processing carried out prior to withdrawal.

VIPSlot does not sell, rent, or trade your Personal Data to third-party marketers or data brokers under any circumstances. Personal Data may be disclosed to the following categories of third parties only where strictly necessary and subject to appropriate contractual data protection safeguards:

• Payment Processors and Financial Institutions: Partners facilitating the processing of deposits and withdrawals, including providers supporting Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency networks.
• Identity Verification Providers: Third-party KYC and document verification services used to authenticate your identity and age in connection with your account.
• Fraud Prevention and AML Screening Services: Providers that screen transactions and account data against fraud databases and sanctions lists.
• Technology and Infrastructure Partners: Cloud hosting providers, content delivery networks, and software platforms used in the operation of the VIPSlot Platform, each bound by confidentiality and data processing obligations.
• Regulatory and Law Enforcement Authorities: Government bodies, regulators, and law enforcement agencies, where disclosure is required by law, court order, or regulatory direction.
• Professional Advisers: Legal counsel, auditors, and compliance advisers, subject to professional secrecy obligations, where required for the conduct of VIPSlot's business.

In the course of operating a global online gaming platform, your Personal Data may be transferred to, stored in, or processed in jurisdictions outside Malaysia. In all cases where such international transfers occur, VIPSlot takes steps to ensure that an adequate level of data protection is applied, including through the use of contractual safeguards with the receiving entity and, where applicable, reliance on recognised data transfer mechanisms.

By using the VIPSlot Platform, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Malaysia where this is necessary for the provision of the services described in this Policy.

VIPSlot retains your Personal Data for no longer than is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulation. The following general retention principles apply:

• Active Accounts: Personal Data associated with an active player account is retained for the duration of the account relationship and for a minimum period of five (5) years following account closure, in compliance with AML record-keeping obligations.
• Financial Transaction Records: Records of deposits, withdrawals, and betting transactions are retained for a minimum of five (5) years from the date of each transaction for compliance and audit purposes.
• KYC Documentation: Identity verification documents are retained for a minimum of five (5) years following the end of the account relationship or as required by applicable law.
• Support Communications: Customer support records, including live chat transcripts and email correspondence, are retained for up to two (2) years from the date of the communication unless a longer period is required for dispute resolution.
• Marketing Preferences: Records of your marketing consent (or withdrawal thereof) are retained for the duration of your account and for a period following account closure sufficient to demonstrate compliance with consent obligations.

Upon expiry of applicable retention periods, Personal Data is securely deleted or anonymised in accordance with VIPSlot's data disposal procedures.

VIPSlot implements and maintains a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data at rest within VIPSlot's database infrastructure.
• Two-factor authentication (2FA) available to all account holders and mandatory for administrative access.
• Role-based access controls limiting employee access to Personal Data to those with a legitimate operational need.
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified security professionals.
• Automated fraud detection and account monitoring systems operating continuously.
• Incident response procedures for the detection, reporting, and remediation of data security events.

Notwithstanding the above, no security system is impenetrable. VIPSlot cannot guarantee the absolute security of your Personal Data and encourages you to take appropriate precautions on your own device, including using a strong and unique account password and enabling 2FA on your VIPSlot account.

VIPSlot uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies may be used:

Most web browsers allow you to manage cookie preferences through the browser settings menu. Disabling strictly necessary or security cookies may impair the functionality of the Platform and may prevent you from logging in or completing transactions. VIPSlot does not use third-party advertising or behavioural tracking cookies.

Subject to applicable law, you hold the following rights with respect to your Personal Data held by VIPSlot. To exercise any of these rights, please contact our Data Protection contact point at [email protected] or via live chat.

The VIPSlot Platform is strictly intended for players who are at least 21 years of age. VIPSlot does not knowingly collect or process Personal Data belonging to individuals under the age of 21. Our KYC verification process includes a mandatory age verification step, and any account found to be held by a person under 21 will be closed immediately.

If you believe that a person under the age of 21 has registered an account on the Platform or that Personal Data belonging to a minor has been collected, please notify us immediately at [email protected]. VIPSlot will promptly investigate and, where confirmed, close the account and delete the associated Personal Data, subject to any overriding legal retention obligations.

The VIPSlot Platform may contain references or links to third-party services — including payment gateway interfaces for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and other providers — that operate independently of VIPSlot. This Policy applies solely to the processing of Personal Data by VIPSlot in connection with its own Platform.

VIPSlot is not responsible for the privacy practices of third-party services and does not control how they collect, process, or protect Personal Data. When you are redirected to a third-party service to complete a payment transaction, you should review that provider's own privacy policy before submitting any personal information.

VIPSlot reserves the right to amend this Privacy Policy at any time. Changes will be published on this page with an updated effective date. Where amendments are material — for example, where they significantly alter the categories of data collected or the purposes for which Personal Data is processed — VIPSlot will make reasonable efforts to notify active account holders via email or an in-Platform notification prior to the changes taking effect.

Your continued use of the VIPSlot Platform following the publication of any amendment constitutes your acceptance of the revised Policy. If you do not agree with any revised terms, you must stop using the Platform and may request account closure and data deletion in accordance with Section 12 of this Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by VIPSlot, please contact us through one of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the live chat widget on the VIPSlot Platform. This is the fastest channel for urgent data security concerns.
• Email: [email protected] — please type this address manually into your email client; it is provided as plain text only and is not a clickable link.

For formal data subject access requests or erasure requests, please contact us via email with the subject line "Data Subject Request" and include sufficient information to verify your identity. VIPSlot will acknowledge receipt within 5 business days and aim to provide a substantive response within 30 days.