SL999 Privacy Policy – Our Commitment to Protecting Your Personal Data in Malaysia

1Introduction & Scope of This Policy

SL999 ("we", "platform", or "the Company") is committed to protecting the privacy of every individual who interacts with our platform. This Privacy Policy sets out our data handling practices — what information we collect, why we need it, and how we use it.

This policy is drawn up in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international privacy standards. It applies to all personal data collected through:

• Account registration and the identity verification (KYC) process at SL999.
• Use of casino games, slots, Live Casino, table games, and Sports Betting.
• Deposit and withdrawal transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX.
• Communications with the sl999 customer support team.
• Use of the SL999 mobile app and web browser.

2Types of Personal Data We Collect

SL999 only collects data that is necessary to provide a secure, compliant, and high-quality service. The following are the categories of data we collect:

3How We Use Your Personal Data

Every piece of data collected by SL999 has a specific and legitimate purpose. We use your data to:

• Account Management: Creating, verifying, and maintaining your SL999 member account, including the KYC process required for withdrawals.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, and handling withdrawals accurately and securely.
• Security & Fraud Detection: Detecting and preventing unauthorised access, money laundering, identity fraud, and platform abuse.
• Customer Support: Responding to enquiries, resolving complaints, and providing technical support to sl999 members.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and offer appropriate assistance.
• Marketing Communications: Sending information about sl999 promotions, bonuses, and offers — subject to your consent.
• Platform Improvements: Analysing usage data to improve the design, performance, and content of the SL999 platform.
• Legal Compliance: Complying with legal obligations and regulations applicable to SL999's operations in Malaysia.

4Legal Basis for Data Processing

Sl999 processes your personal data on valid legal grounds under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Contract Performance: Processing required to fulfil the agreement between you and SL999 — including account registration, transaction processing, and the provision of gaming services.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) and KYC obligations.
• Legitimate Interests: Processing for the purposes of fraud prevention, platform security, and internal analytics that do not prejudice your interests.
• Consent: For marketing communications and non-essential cookies — where your explicit consent is required.

5Data Sharing & Disclosure

SL999 does not sell or rent your personal data. We only share data in the following circumstances:

• Payment Service Providers: Transaction data necessary to process your deposits and withdrawals through licensed payment providers such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX.
• Game Software Providers: Limited account information required by third-party game providers to deliver slots, Live Casino, and table games on the sl999 platform.
• Statutory Authorities: When required by Malaysian law or a lawful directive from a competent authority, including anti-money laundering cases.
• Analytics Providers: Anonymised and aggregated usage data (non-personally identifiable) shared with analytics tool providers for platform improvement purposes.

6Data Security Measures

SL999 implements a range of technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• 256-bit SSL/TLS Encryption: All communications between your browser or app and SL999's servers are fully encrypted.
• Database Encryption: Sensitive data in our databases is stored in encrypted form using AES-256 standards.
• Two-Factor Authentication (2FA): SL999 supports and encourages the use of 2FA for account access to add an extra layer of security.
• Internal Access Controls: Only SL999 employees with a legitimate business need are permitted to access members' personal data, and all such access is logged and audited.
• 24/7 Security Monitoring: Our systems are continuously monitored to detect and respond to security threats in real time.
• Penetration Testing: SL999's infrastructure undergoes regular security testing conducted by independent cybersecurity experts.

7Data Retention Period

SL999 does not retain your personal data for longer than necessary. Retention periods depend on the type of data and the purpose for which it was collected:

• Active Account Data: Retained for as long as your account is active and for 7 years after account closure for legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years after the transaction as required under Malaysian anti-money laundering laws.
• Security Logs: Retained for 12 months for security investigation and fraud detection purposes.
• Marketing Communication Data: Retained until you withdraw your consent or 3 years from the date of last communication, whichever comes first.
• Cookie Data: It depends on the type of cookie — session cookies are deleted when the browser is closed, while persistent cookies are stored for a set duration (up to 2 years).

8Your Rights as a Data Subject

Under Malaysia's PDPA and the privacy standards that SL999 adheres to, you have the following rights regarding your personal data:

To exercise any of the rights above, please contact SL999's Privacy Officer by email at privacy@sl999.ws. We will respond to your request within 30 calendar days.

9Cookies & Tracking Technologies

SL999 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. The following are the types of cookies we use:

• Essential Cookies: Required for core sl999 platform operations, including login authentication and session security. These cookies cannot be disabled.
• Analytics Cookies: Collecting information about how you use the SL999 platform to help us understand usage patterns and improve the platform. This data is anonymised.
• Functional Cookies: Remembering your preferences such as language, location, and account settings to provide a more personalised experience.
• Security Cookies: Helps detect and prevent fraudulent activity, and ensures the integrity of your login session.

10Cross-Border Data Transfers

In the course of its operations, SL999 may transfer your personal data to servers or service providers located outside Malaysia. Such transfers only take place when:

• The recipient country has data protection laws comparable to those in Malaysia.
• We have put in place appropriate contractual safeguards with the relevant service providers.
• The transfer is necessary to perform the service contract between you and sl999.

SL999 ensures that all cross-border data transfers comply with Malaysia's PDPA requirements and that your data is consistently protected to a standard equivalent to that in Malaysia.

11Child Protection

The sl999 platform is exclusively for individuals aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

Should we discover that personal data has been collected from an individual under the age of 18 without appropriate age verification, we will immediately take the following steps:

• Closing the account in question and deleting all associated data.
• Refunding any deposits made (subject to identity verification).
• Reporting the matter to the appropriate authorities where required.

12Amendments to the Privacy Policy

SL999 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable legal requirements.

When we make significant changes to this Privacy Policy, we will:

• Updating the "Updated" date at the top of this document.
• Sending a notice to your registered email address at least 14 days before the changes take effect.
• Displaying a clear notice on the main page of the SL999 platform.

Your continued use of the sl999 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

13Contact Our Privacy Officer

Sl999 has appointed a Data Privacy Officer responsible for ensuring compliance with this Privacy Policy and handling all personal data-related enquiries. For any privacy questions, requests, or complaints, please contact us:

• Privacy Email: privacy@sl999.ws
• Support Email: support@sl999.ws
• Live Chat: Available 24/7 via the chat icon on the sl999 platform.
• Response Time: Privacy enquiries will be responded to within 5 business days; data subject requests within 30 calendar days.