OsoSlot Privacy Policy

Introduction

This Privacy Policy (hereinafter "the Policy") is issued by OsoSlot (hereinafter "OsoSlot", "we", "us", or "our"), the operator of the online gaming platform accessible at https://ososlot.cam. It governs the collection, use, storage, disclosure, and protection of personal data belonging to members, prospective members, and visitors of the Platform (hereinafter "you" or "your").

OsoSlot is committed to handling personal data responsibly, transparently, and in a manner consistent with applicable data protection laws and principles. This Policy is written in English — the official language of the OsoSlot platform — and is intended for Malaysian users. We aim to communicate our data practices in plain, accessible language rather than impenetrable legal boilerplate.

By registering an account on OsoSlot, depositing funds, or otherwise accessing the Platform, you acknowledge that you have read and understood this Policy and that you consent to the data practices described herein. If you do not agree with this Policy, you must not create an account or use the Platform.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including but not limited to name, identification number, contact details, financial information, and online identifiers such as IP addresses.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means OsoSlot, the entity that determines the purposes and means of processing personal data.
• "Data Processor" means a third party that processes personal data on behalf of OsoSlot under a contractual obligation and in accordance with this Policy.
• "KYC Data" refers to identity and address verification documents submitted by Members in fulfilment of Know Your Customer obligations.
• "Cookies" refers to small text files placed on a user's device by a web server for the purpose of maintaining session state, preferences, or analytics data.
• "Third Parties" means entities other than OsoSlot and the Member, including payment processors, game studios, analytics providers, and regulatory bodies.
• "Member" means a natural person who has completed registration on the OsoSlot platform and holds an active account.

Data We Collect

OsoSlot collects personal data through several channels, including direct input by the Member, automated technical collection, and third-party verification services. The categories of data we collect are described below.

3.1 Registration Data

When you create an OsoSlot account, you are required to provide:

• Full legal name as it appears on your government-issued identification;
• Date of birth (for age verification — minimum age is 21);
• Residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam);
• Email address;
• Malaysian mobile phone number;
• Chosen username and password (password stored as a salted hash — never in plain text).

3.2 KYC & Identity Verification Data

Prior to processing withdrawals, OsoSlot is required to verify your identity. KYC data collected includes:

• Copy of a valid government-issued photo identification (e.g., Malaysian MyKad, passport);
• Proof of residential address (e.g., utility bill, bank statement dated within three months);
• Payment method verification (e.g., screenshot of e-wallet account, bank account statement confirming ownership).

3.3 Financial & Transaction Data

We collect data relating to your financial interactions with the Platform, including:

• Deposit amounts, dates, times, and payment methods used (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency);
• Withdrawal requests, amounts, destination accounts, and processing status;
• Bonus credits, wagering activity, and win/loss records;
• Internal wallet balance history.

OsoSlot does not store full card numbers or full e-wallet credentials. Payment tokenisation is handled by our payment processor partners.

3.4 Technical & Device Data

When you access the Platform, our servers automatically collect certain technical data, including:

• IP address and approximate geolocation (country/city level);
• Device type, operating system, and browser version;
• Session timestamps, page navigation paths, and time-on-page data;
• Error logs and crash reports for platform stability monitoring.

3.5 Customer Support Data

When you contact our support team via live chat or email, we collect and retain the contents of that communication, including any personal data you choose to share, for quality assurance, dispute resolution, and compliance purposes.

3.6 Data You Choose Not to Provide

Certain data fields are mandatory for account creation and KYC compliance. Where you decline to provide mandatory data, OsoSlot may be unable to create your account, process withdrawals, or provide certain services.

Legal Basis for Processing

OsoSlot processes your personal data on the following legal bases:

How We Use Your Data

OsoSlot uses the personal data it collects for the following specific purposes:

• Account Management: Creating, maintaining, and managing your Member account, including login authentication, account settings, and preference management.
• Payment Processing: Processing deposits and withdrawals in MYR via supported Malaysian payment channels, and reconciling transaction records.
• Identity & Age Verification: Verifying that you are who you say you are and that you meet the minimum age requirement of 21 years.
• Anti-Money Laundering (AML) Compliance: Monitoring transaction patterns for unusual or suspicious activity in fulfilment of our regulatory obligations.
• Fraud Prevention: Detecting and preventing account fraud, bonus abuse, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gambling: Monitoring member activity for indicators of problem gambling behaviour, enforcing self-exclusion requests, and administering deposit and loss limits set by members.
• Customer Support: Responding to your queries, complaints, and service requests via live chat and email.
• Platform Improvement: Analysing aggregate, anonymised usage data to improve the performance, stability, and design of the Platform.
• Legal & Regulatory Compliance: Maintaining records and responding to lawful requests from regulatory authorities, law enforcement agencies, or courts of competent jurisdiction.
• Security Monitoring: Detecting and responding to cybersecurity threats, suspicious access patterns, and data breach indicators.

Data Sharing & Disclosure

OsoSlot does not sell, rent, or trade personal data. We share personal data with third parties only in the following circumstances and only to the minimum extent necessary:

6.1 Payment Processors

To process deposits and withdrawals, we share necessary financial and identity data with our payment processing partners, including Malaysian e-wallet operators (Touch 'n Go, Boost, GrabPay), FPX banking partners (Maybank, CIMB, Public Bank, Hong Leong Bank), and cryptocurrency processing services. These partners are contractually bound to process data only for payment fulfilment purposes and may not use it for any other purpose.

6.2 Identity Verification Services

OsoSlot may use third-party identity verification providers to assist with KYC processing. Such providers are engaged under data processing agreements and are required to maintain data security standards equivalent to those described in this Policy.

6.3 Game Studio Providers

Certain game studios integrated on the Platform may receive anonymised session and wagering data for game performance reporting purposes. No personally identifiable information is shared with game studios.

6.4 Regulatory & Law Enforcement Authorities

OsoSlot may disclose personal data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where we are legally required to do so, or where we reasonably believe disclosure is necessary to: comply with a legal obligation; protect OsoSlot's rights or property; prevent or detect fraudulent, illegal, or harmful activity; or protect the safety of our members or the public.

6.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of OsoSlot's assets, personal data held by OsoSlot may be transferred to the relevant successor entity, subject to that entity maintaining equivalent data protection standards. Members will be notified of any such transfer in advance where practicable.

International Data Transfers

As an online gaming platform serving Malaysian users with infrastructure and third-party partners that may be based in various jurisdictions, some processing of your personal data may involve transfers outside of Malaysia. Where such transfers occur, OsoSlot takes the following steps to ensure your data remains adequately protected:

• We only transfer data to countries or organisations that provide an adequate level of data protection;
• Where transfers occur to processors in countries without an equivalent adequacy standard, we implement appropriate contractual safeguards, including standard contractual clauses;
• All third-party processors operating outside Malaysia are required to adhere to data security standards as least equivalent to those described in Section 9 of this Policy.

For specific information about the safeguards applicable to any particular international data transfer, Members may contact OsoSlot using the contact details in Section 14.

Data Retention

OsoSlot retains personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to applicable legal and regulatory minimum retention periods. The following general retention guidelines apply:

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

Security Measures

OsoSlot implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your browser and our servers is encrypted using TLS 1.3 with 256-bit SSL certificates. HTTPS is enforced site-wide with HTTP Strict Transport Security (HSTS) headers.
• Encryption at Rest: Sensitive personal data and KYC documents stored on our servers are encrypted at rest using AES-256 encryption standards.
• Password Security: Member passwords are stored exclusively as salted cryptographic hashes. OsoSlot never stores passwords in plain text or reversible form.
• Access Controls: Internal access to personal member data is governed by role-based access controls. Employees may only access data within their defined operational function. All internal data access is logged and subject to periodic audit.
• KYC Document Isolation: Identity documents submitted for KYC verification are stored on isolated servers physically and logically separated from the main Platform database, accessible only by authorised compliance personnel.
• Security Monitoring: OsoSlot operates continuous security monitoring for anomalous access patterns, intrusion attempts, and data breach indicators. Incident response procedures are in place and tested periodically.
• Two-Factor Authentication (2FA): Members may enable 2FA on their accounts for additional login security. OsoSlot recommends all Members activate 2FA.

Notwithstanding these measures, no method of electronic data transmission or storage is completely secure. OsoSlot cannot guarantee absolute security and is not liable for third-party breaches beyond our reasonable control. In the event of a data breach that is likely to result in a risk to your rights, OsoSlot will notify affected Members without undue delay.

Cookies & Tracking Technologies

OsoSlot uses cookies and similar tracking technologies on the Platform. The following categories of cookies are used:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They include session cookies that maintain your login state between pages, security tokens that prevent CSRF attacks, and cookies that remember your language and currency preferences. No personal data is transmitted to third parties via these cookies.

10.2 Analytics Cookies

OsoSlot uses first-party analytics tools to collect aggregate, anonymised data on how Members use the Platform — including which pages are visited, how long sessions last, and where users encounter technical errors. This data is used exclusively to improve platform performance and is not linked to individual identities.

10.3 No Third-Party Advertising Cookies

OsoSlot does not place third-party advertising or retargeting cookies on the Platform. We do not permit advertising networks to track Members across websites for profiling or remarketing purposes.

10.4 Managing Cookies

You may disable non-essential cookies at any time via your browser settings. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to block or delete cookies through their privacy or settings menus. Please note that disabling strictly necessary cookies will impair the functionality of the Platform, including login persistence and session security.

Minors & Age Policy

OsoSlot's platform is strictly intended for persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory element of our KYC process, and we reserve the right to request age-verifying documentation at any stage of the account lifecycle.

If OsoSlot becomes aware that personal data has been collected from a person under the age of 21 without parental or guardian consent, we will immediately suspend the relevant account, initiate an investigation, delete the personal data where legally permissible, and take any other steps required under applicable law.

If you are a parent or guardian and believe your child may have registered on OsoSlot, please contact our support team immediately. We take underage access seriously and will act promptly on all substantiated notifications.

Your Rights Over Your Personal Data

As a data subject, you have the following rights with respect to the personal data OsoSlot holds about you. Requests may be submitted via live chat or email using the contact details in Section 14. OsoSlot will respond to all verified requests within thirty (30) calendar days.

Policy Amendments

OsoSlot reserves the right to update or amend this Privacy Policy at any time. Material changes — for example, changes to the categories of data collected, new data sharing arrangements, or significant alterations to Member rights — will be communicated to Members via a notice posted on the Platform homepage and, where appropriate, by email to the registered address on file.

The "Last Reviewed" date at the top of this Policy will be updated whenever a revision is made. We encourage Members to review this Policy periodically. Continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy.

If a proposed amendment materially reduces your data protection rights, we will provide advance notice and an opportunity to close your account and withdraw any eligible balance before the changes take effect.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, need to report a potential data protection concern, or want to submit a formal privacy complaint, please contact OsoSlot using the following channels:

• Live Chat: Available 8AM – 2AM MYT daily via the live chat widget on the Platform. For general privacy queries and quick clarifications.
• Email: [email protected] — For formal data subject access requests, erasure requests, data portability requests, or formal privacy complaints. Please include your registered username, the specific right or concern you are raising, and any supporting context that will help us process your request accurately and efficiently.

OsoSlot will acknowledge all privacy-related email communications within two (2) business days and aim to provide a full response within thirty (30) calendar days. For complex requests involving large volumes of data or legal review, we may extend this period by a further thirty (30) days, in which case you will be notified of the extension and the reason for it.

OsoSlot's support team operates with full awareness of Malaysian user expectations and the local regulatory context. We are committed to handling all privacy requests professionally, promptly, and with respect for your rights.