Privacy Policy Bonus Slot – Our Commitment to Protecting Your Personal Data

This Privacy Policy explains how bonus slot ("we", "platform", or "bonus slot") collects, processes, stores, and protects the personal data you provide when using our online entertainment platform at bonusslot.ws.

This policy applies to all registered members, website visitors, individuals who interact with our platform through any communication channel, and any party whose data is processed by bonus slot in the ordinary course of our operations.

Bonus slot is fully compliant with Personal Data Protection Act (PDPA) 2010 Malaysia and relevant international data protection standards. We treat compliance as a minimum baseline — our actual commitment goes beyond legal requirements to provide you with the highest level of protection.

Bonus slot only collects data that is necessary for the stated and legitimate purposes. Below are the categories of data we collect:

Every use of your personal data by bonus slot is grounded in a valid legal basis. Below is a simplified flowchart of how data moves through our system:

Specific purposes for data use:

• Account management: Creating, verifying, and maintaining your member account.
• Financial transactions: Processing deposits via Touch 'n Go, GrabPay, DuitNow, FPX, and other Malaysian payment methods; and managing withdrawals of winnings in Malaysian Ringgit (RM).
• Platform security: Detecting and preventing fraud, money laundering, and unauthorised access.
• Legal compliance: Compliant with Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements.
• Responsible gambling: Monitoring gameplay patterns to identify and support members who may be experiencing gambling-related issues.
• Customer support: Processing and resolving your enquiries, complaints, and requests.
• Service communications: Sending important notifications related to your account, security, and terms updates (with your consent).

Bonus slot does not sell, rent, or trade your personal data. However, under the following limited circumstances, we may share your data:

• Trusted service providers: Companies that help us operate the platform — such as payment service providers (Touch 'n Go, GrabPay, DuitNow), game providers (recognised within the industry), and cloud service providers. All are bound by strict data protection agreements.
• Legal requirement: Where required by Malaysian law, court order, or a legitimate regulatory authority.
• Fraud prevention: With recognised fraud prevention agencies to safeguard our platform and members.
• Business transfer: Should bonus slot undergo a merger, acquisition, or asset sale, members will be notified in advance and your privacy rights will continue to be protected.

Bonus slot continuously invests in security infrastructure to safeguard your personal data. Key technical and organisational measures we have in place:

• Transit encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3 — the latest and most secure protocol available.
• Data at rest encryption: Data stored in our database is encrypted using AES-256 — the same standard used by government security agencies.
• Two-factor authentication (2FA): Available and strongly encouraged for all member accounts.
• 24/7 Monitoring: An intrusion detection system (IDS) monitors for suspicious activity around the clock.
• Internal access controls: Principle of least privilege — staff may only access data that is strictly required for their role.
• Penetration testing: Independent penetration testing is conducted by third-party firms on a quarterly basis.
• Data backup: Data backups are performed daily and stored at a separate, equally secured location.

Under Malaysia's PDPA 2010 and bonus slot's privacy commitment, you have the following rights over your personal data:

To exercise any of these rights, contact our Privacy Officer by email at privacy@bonusslot.ws or via the platform's live chat. Requests will be processed within 14 working days and at no charge.

Bonus slot uses cookies and similar technologies to ensure the platform runs smoothly and to provide you with a better experience. Below are the types of cookies we use:

Bonus slot does not use marketing cookies or third-party tracking cookies that monitor your activity outside our platform. You can manage your cookie preferences through your web browser settings or by contacting our customer support.

Bonus slot retains your personal data only for as long as necessary for the stated purposes or as required by Malaysian law:

• Active account data: Retained for the duration your account is active and for 5 years following account closure (AML/KYC requirement).
• Financial transaction records: Retained for 7 years in accordance with Malaysian financial law requirements.
• Communication records: Retained for 2 years for complaint resolution and service improvement purposes.
• Security log data: Retained for 1 year for threat detection and incident investigation purposes.
• Functional cookie data: Automatically deleted 12 months from the date of creation.

Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered. This deletion process runs on an automated schedule and is verified by independent audits.

Bonus slot may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When significant changes occur:

• You will be notified via an in-platform notification and an email to your registered address at least 14 days before the changes take effect.
• The "Updated" date at the top of this document will be revised accordingly.
• For significant changes, you may be asked to actively confirm your acceptance of the updated policy.

Continued use of the platform after any changes take effect will be considered acceptance of the updated policy. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this privacy policy or the processing of your personal data, please contact our Data Protection Officer (DPO) at:

• Privacy Email: privacy@bonusslot.ws — for formal requests relating to data rights.
• Support Email: support@bonusslot.ws — for general enquiries.
• Live Chat: Available 24/7 within the platform for immediate enquiries.

We are committed to responding to all privacy-related enquiries within 5 business days. Requests to exercise data rights will be processed within 14 business days.