Jaya Slot Privacy Policy – Player Data Protection for Malaysia

Jaya Slot understands that when you entrust us with your personal information, you are placing a great deal of trust in us. We do not take that responsibility lightly. This Privacy Policy is a statement of our commitment to you — it explains clearly and honestly how we handle every aspect of your personal data.

Jaya Slot operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means every data collection, usage and storage practice we follow meets current Malaysian legal requirements. We also draw on international best practices in data protection to ensure we provide you with the highest level of protection we can.

What sets Jaya Slot's approach to privacy apart is that we view it as a relationship built on trust, not merely a legal obligation. We know Malaysian players place great importance on the privacy of their financial and personal information — especially on an online entertainment platform. That is why this policy is written in plain, easy-to-understand language, free from confusing legal jargon.

Jaya Slot collects your personal data through several channels — during account registration, while you use the platform, and through your communications with our support team. Below are the types of data we collect and the purposes for doing so:

Identity & Contact Data:

• Full name (as stated in your official identification document)
• Malaysia mobile phone number
• Email address (if provided)
• Date of birth (for 18+ age verification)
• Malaysian Identity Card number (MyKad) – collected during the KYC (Know Your Customer) process for withdrawals exceeding a specified threshold

Financial & Transaction Data:

• Record all deposits – including the amount, date, time, and payment method used (Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX via Maybank2u / CIMB Clicks)
• A record of all withdrawals, including payment method and processing time
• Account number or e-wallet phone number linked to your account for payment processing purposes
• Bonus claim history and wagering requirement status

Usage & Technical Data:

• IP address of the device used to log in
• Device type, operating system and web browser
• Game history – games played, bet amounts, session duration
• Account activity logs including login and logout times
• Data cookies and platform preferences (see Section 6)

Communication Data:

• Records of conversations with our customer support team via live chat, WhatsApp, or email
• Any feedback, complaints, or suggestions you submit to us

Jaya Slot uses your personal data only for lawful, clearly stated purposes. Below is a full list of those purposes:

• Platform Service Provision: To process account registration, verify your identity, enable you to log in, and access all Jaya Slot platform features including slots, Live Casino, Sports Betting and lottery.
• Financial Transaction Processing: To process deposits via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay and FPX, and to manage withdrawals of your winnings to your preferred payment method. All transactions are in RM (MYR) only.
• Age Verification & KYC: To ensure that only individuals aged 18 and above can access the platform, and to comply with legal requirements on customer identity verification.
• Fraud Prevention & Security: To detect and prevent unauthorised access, fraud, money laundering and platform abuse. This includes analysis of transaction patterns and suspicious user behaviour.
• Customer Support: To respond to your enquiries, resolve complaints and provide technical assistance. Communication records are retained to ensure consistency in the service we deliver.
• Bonus & Promotions Management: To manage bonus claims, ensure each player receives only one claim per offer, and send you notifications about relevant promotions (if you have opted in to receive marketing communications).
• Responsible Gaming: To monitor gaming patterns and identify players who may need responsible gaming support, and to enforce limits you have set yourself within your account.
• Legal Compliance: To comply with Malaysian legal requirements including the PDPA, financial reporting obligations, and any directives from relevant authorities.

Jaya Slot does not use your data for any purpose beyond those stated above without first obtaining your explicit consent. If you do not wish to receive marketing communications, you may unsubscribe at any time through your account settings or by contacting our support team.

Jaya Slot does not sell, rent or trade your personal data to any third party for marketing or commercial gain. This is our unconditional commitment to you. However, in the course of operating the platform, we may need to share your data in the following limited circumstances:

• Payment Service Providers: The payment gateways we use to process DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX transactions require minimal transaction data to complete payments. All providers are selected based on their security and privacy compliance, and data is shared solely for the purpose of processing transactions.
• Gaming Service Providers: Third-party game providers integrated into our platform (for slots, Live Casino, and so on) may receive the session data necessary to operate the games correctly. We do not share financial information or full identity details with game providers.
• Technical Service Providers: Technology infrastructure providers — such as cloud hosting services used by Jaya Slot — may have limited access to data stored within their systems. All such providers are bound by strict confidentiality agreements.
• Legal Requirements: Jaya Slot will disclose personal data when required by Malaysian law or upon receipt of a lawful directive from authorities such as the police, courts, or financial enforcement bodies. We will endeavour to notify you of any such data requests unless prohibited from doing so by law.
• Business Transfer: Should Jaya Slot be involved in a merger, acquisition or asset sale, user data may be transferred as part of that transaction. We will notify you before any such transfer takes place and ensure the recipient upholds equivalent privacy standards.

Jaya Slot continuously invests in the latest security technologies and procedures to protect your personal data from unauthorised access, disclosure, alteration or destruction. The key security measures we employ include:

• Data Encryption in Transit: All communications between your browser or app and Jaya Slot's servers are secured with TLS 1.3 using AES-256 encryption — the same encryption standard used by Maybank Online Banking and CIMB Clicks.
• Stored Data Encryption: Sensitive information such as passwords is stored as irreversible hashes using the bcrypt algorithm. Sensitive financial data is stored in encrypted format, even within our own internal databases.
• Tiered Access Controls: Access to player data is restricted to Jaya Slot staff with a legitimate business need. Our role-based access control (RBAC) system ensures each staff member can only view the data relevant to their role. All access to sensitive data is logged and monitored.
• Two-Factor Authentication (2FA): Jaya Slot offers 2FA as an option for all player accounts. We also enforce 2FA internally for all system access involving player data by our staff.
• Continuous Monitoring: Our 24/7 security monitoring system detects suspicious activity and unauthorised access attempts in real time, alerting our security team immediately.
• Regular Security Testing: Independent security audits are conducted quarterly and penetration testing is carried out annually by certified third-party cybersecurity firms to identify and address any system vulnerabilities.
• Breach Response Procedure: Jaya Slot has a comprehensive incident response plan in place. In the event of a data breach, we are committed to notifying affected players within 72 hours of detection and reporting to the relevant authorities as required by law.

While we take all reasonable steps to protect your data, no system can guarantee 100% security at all times. You can also help safeguard your account by using a strong password, enabling 2FA, and never sharing your login credentials with anyone.

Jaya Slot uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. Below are the types of cookies we use:

• Strictly Necessary Cookies: These cookies are required for the Jaya Slot platform to function properly. They store your login session information so you do not need to log in again each time you navigate to a different page. Disabling this type of cookie will affect platform functionality.
• Performance & Analytics Cookies: We use aggregated, anonymised usage data to understand how players interact with our platform — which pages are visited most, where users encounter difficulties, and how we can improve the overall experience. This data is not linked to your individual identity.
• Functional Cookies: These cookies store your preferences — such as your chosen language, display settings, and favourite game selections — to provide a more personalised experience when you use Jaya Slot.
• Security Cookies: Used to detect suspicious activity, prevent CSRF (Cross-Site Request Forgery) attacks, and verify that you are a legitimate user and not an automated bot.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality of the Jaya Slot platform. We do not use third-party advertising cookies or allow ad networks to collect your data through our platform.

Jaya Slot retains your personal data only for as long as necessary for the purposes stated in this policy, or as required under Malaysian law. The following are our data retention guidelines:

• Active Account Data: For as long as your account remains active with Jaya Slot, we retain all profile information and transaction history necessary to provide our services to you.
• Data Following Account Closure: After your account is closed — whether voluntarily or at our request — we retain certain records for a minimum of 7 years for legal compliance and financial reporting purposes, as required under Malaysian law.
• Financial Transaction Records: All deposit, withdrawal and transaction records are retained for a minimum of 7 years in accordance with Malaysian financial regulatory requirements.
• Customer Support Communication Logs: Customer support conversation records are retained for 3 years for reference and service continuity purposes.
• Security Log Data: System access logs and security data are retained for 2 years to support security incident investigations when required.

Once the applicable retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered. If you wish to request early deletion of your data (subject to legal requirements permitting this), please refer to Section 9 on your rights.

The Jaya Slot platform is strictly for individuals aged 18 and above. We do not knowingly collect or process any personal data from children or individuals under the age of 18.

Jaya Slot applies age verification procedures at registration to ensure only individuals who meet the minimum age requirement are permitted to use the platform. If we discover that we have collected data from an underage individual, we will delete that data immediately and close the associated account.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and Jaya Slot's privacy commitments, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you. Data access requests will be processed within 30 business days. Your Jaya Slot account also allows you to view most of your activity records and history directly on the platform.
• Right to Rectification: If you believe that the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Basic profile details such as your phone number can be updated directly in your account settings.
• Right to Erasure ("Right to be Forgotten"): You have the right to request the deletion of your personal data, subject to the legal retention requirements outlined in Section 7. Financial transaction records may need to be retained for compliance purposes even after a deletion request is received.
• Right to Object to Processing: You may object to the processing of your data for direct marketing purposes at any time. For marketing communications, you can unsubscribe via the link in any email or through your account notification settings.
• Right to Restrict Processing: In certain circumstances, you have the right to request that we restrict the processing of your data — for example, while we are investigating an objection you have raised regarding data accuracy.
• Data Portability Rights: You have the right to receive the personal data you have provided to us in a structured, machine-readable format, for your own use or to transfer to another service provider.

To exercise any of the rights above, please submit a written request to our privacy team at support@jayaslot.wine stating the type of request and the information needed to verify your identity. We will endeavour to process all requests within 30 business days.

Jaya Slot reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, evolving legal requirements, or new platform features we introduce. Whenever we make material changes to this policy, we will:

• Updating the "Last Updated" date at the top of this page
• Send a notification to your registered email for any changes that materially affect your privacy rights
• Displaying clear notices on the Jaya Slot platform regarding privacy policy updates
• Maintaining archived versions of previous Privacy Policies for your reference if needed

We encourage you to review this page periodically to stay informed about how we manage your data. Continued use of the Jaya Slot platform after any changes take effect will be considered your acceptance of the updated policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or how Jaya Slot handles your personal data, our privacy team is here to help. We take every privacy enquiry seriously and are committed to providing a clear and helpful response.

You can reach us through the following channels:

• Email: support@jayaslot.wine (please indicate "Privacy Inquiry" in your email subject line)
• Live Chat: Available 24/7 within the Jaya Slot platform – typical response time under 2 minutes
• WhatsApp/Telegram: For VIP Gold members and above, through your dedicated personal account manager

We commit to responding to all privacy-related enquiries within 3 business days. For more complex requests such as data access or deletion, processing time is up to 30 business days in accordance with Malaysia's PDPA requirements.

If you are not satisfied with our response to your privacy enquiry or complaint, you have the right to refer the matter to Malaysia's Personal Data Protection Department (JPDP) or the relevant enforcement authority.