Winslot is committed to protecting the personal information of every player on our platform. This Privacy Policy explains what data we collect, how we use it, who we share it with, and the rights you hold as a user — including Malaysian players accessing our platform.
Six core commitments that underpin how Winslot handles your personal information. These cards are a summary — the full policy is below.
Winslot collects only the personal data strictly required to operate your account, comply with licensing obligations, and deliver platform services. We do not collect data for its own sake.
All personal data is encrypted in transit using 256-bit SSL/TLS. Data at rest is stored on secured, access-controlled servers. Payment data is handled by PCI-DSS compliant processors — Winslot does not store full card numbers.
Winslot does not sell, rent, or trade your personal information to third parties for their marketing purposes. Data sharing is limited to operational necessity and legal obligation only.
You have the right to access, correct, and request deletion of your personal data held by Winslot. You may also withdraw consent and request data portability where technically feasible.
Personal data is retained only for as long as necessary for the purpose it was collected, or as required by applicable licensing and anti-money laundering regulations — typically no longer than 5 years post-account closure.
We communicate clearly about what data we hold and why. You can contact our privacy team at any time via support email to ask questions, exercise rights, or raise a data concern.
This Privacy Policy (the "Policy") is issued by Winslot (hereinafter "Winslot", "we", "us", or "the Company"), the operator of the online gaming platform accessible at https://winslot.cam (the "Platform"). This Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by Winslot.
Winslot is committed to the responsible and lawful processing of personal data in accordance with applicable international data protection standards. This Policy applies to all current and former users of the Platform, including registered players, visitors who browse without registering, and individuals who contact us for support.
By accessing or using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with how your data is processed as described herein, you should cease use of the Platform and may request account closure by contacting our support team.
The following definitions apply throughout this Policy:
Winslot collects personal data in the following categories, depending on how you interact with the Platform:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, MyKad / passport number | Registration & KYC verification |
| Contact Data | Email address, mobile number, residential address | Registration & account updates |
| Financial Data | Payment method details, transaction history, withdrawal account information | Deposits & withdrawals |
| KYC Documents | MyKad image, utility bills, bank statements, selfies | KYC verification process |
| Support Data | Chat logs, email correspondence, complaint records | When contacting support |
Winslot may receive Personal Data about you from third parties including identity verification service providers, payment processors, fraud prevention agencies, and publicly available sources, where this is necessary for KYC compliance, fraud prevention, or regulatory obligations.
Winslot processes your Personal Data for the following purposes:
Winslot processes Personal Data on the following legal bases as applicable under international data protection standards:
Winslot does not sell or rent your Personal Data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual protections:
As an internationally licensed platform, Winslot and its service providers may process, store, and transfer your Personal Data in countries outside Malaysia. These countries may not have the same data protection laws as Malaysia.
When Winslot transfers Personal Data internationally, it ensures that appropriate safeguards are in place, which may include contractual clauses, adequacy decisions, or equivalent protections consistent with the requirements of our licensing jurisdiction. By using the Platform, you acknowledge and consent to this transfer.
Winslot retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or licensing obligations. Indicative retention periods are as follows:
Upon expiry of the relevant retention period, Personal Data will be securely deleted or anonymised. Where deletion is not immediately possible due to backup schedules or technical constraints, the data will be isolated and protected until deletion is completed.
Winslot uses cookies and similar tracking technologies (including web beacons and session tokens) to operate and improve the Platform. Below is a summary of the types of cookies we use:
You may control or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of parts of the Platform. Strictly necessary cookies cannot be disabled through browser settings as they are required for Platform operation.
Winslot does not use third-party advertising cookies or allow advertising networks to track your activity across other websites.
Subject to applicable law and our licensing obligations, you have the following rights in respect of your Personal Data held by Winslot:
You have the right to request a copy of the Personal Data we hold about you, together with information about how it is processed. We will respond to access requests within 30 days of receipt.
You have the right to request correction of inaccurate or incomplete Personal Data held about you. You may also update certain information directly via your account dashboard.
You may request deletion of your Personal Data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. This right is subject to legal retention obligations that may require us to retain data for a minimum period.
You may request that we limit the processing of your Personal Data in specific circumstances — for example, while the accuracy of data is being verified, or while an objection is being considered.
Where technically feasible and legally applicable, you may request that your Personal Data be provided to you in a structured, commonly used, machine-readable format, or transferred directly to another service provider at your request.
You have the right to object to the processing of your Personal Data where we rely on legitimate interests as the legal basis, and where your interests override ours. You may also object to processing for direct marketing purposes at any time, with immediate effect.
Where processing is based on your consent, you may withdraw that consent at any time by contacting our support team. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
The Winslot Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, store, or process the Personal Data of any individual under the age of 21.
If Winslot becomes aware that Personal Data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. Any funds deposited through an account found to belong to or have been used by a minor will be handled in accordance with our Terms and Conditions and applicable legal requirements.
If you believe that a minor has registered on or used the Winslot Platform, please contact our support team immediately at [email protected].
Winslot implements and maintains appropriate technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
No security system is impenetrable. While Winslot takes all reasonable steps to protect your data, we cannot guarantee absolute security against all threats. You are responsible for maintaining the security of your account credentials.
The Platform does not contain links to third-party websites for external purposes. Where third-party services are integrated — such as payment processors (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank) — those services are governed by their own privacy policies.
Winslot is not responsible for the content, privacy practices, or security measures of third-party services. We recommend reviewing the privacy policy of any third-party service provider before completing transactions through their platform.
Winslot reserves the right to update, modify, or replace this Privacy Policy at any time. The revised Policy will be posted on this page with an updated "Last Updated" date. We will notify registered users of material changes by email to the address on file where reasonably practicable.
We encourage you to review this Policy periodically to stay informed about how Winslot handles your Personal Data. Continued use of the Platform following any update constitutes your acknowledgement of the revised Policy.
If you disagree with any changes to this Policy, you must cease use of the Platform and contact our support team to request account closure and data handling in accordance with your rights under Section 10.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact Winslot through the following channels:
24/7 Live Chat
Average response: under 3 minutes
We aim to respond to all data subject requests and privacy enquiries within 30 calendar days of receipt. Complex requests may require an extension, in which case we will inform you within the initial 30-day period.
When contacting us regarding your data rights, please include your registered email address and a description of your request. Identity verification may be required before we can process certain data subject requests.
For additional information about your rights as a user and our responsible gaming practices, please visit our Responsible Gambling page and our full Terms & Conditions.
We handle your data responsibly so you can focus on enjoying the Platform. Questions? Our support team is available around the clock.
For players aged 21 and above only. Gambling involves financial risk. Please play responsibly. 21+