Privacy Policy

IstanaSlot ("the Company", "we", "us", or "our") operates the online gaming and sports betting platform accessible at istanaslot.cam (the "Platform"). This Privacy Policy ("Policy") sets out the manner in which IstanaSlot collects, processes, stores, uses, discloses, and otherwise handles personal data relating to individuals ("you", "the User", "the Player") who access or use the Platform.

IstanaSlot recognises that the privacy and security of your personal information is of paramount importance. We are committed to processing your personal data lawfully, fairly, and transparently, and to implementing appropriate technical and organisational measures to protect it from unauthorised access, loss, or misuse.

This Policy should be read in conjunction with our Terms and Conditions, which govern your use of the Platform generally. By registering a Player Account and using our services, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with this Policy, you should refrain from using the Platform.

In this Policy, the following definitions apply unless the context requires otherwise:

• "Personal Data" — any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including name, identification number, contact details, location data, or online identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure by transmission, dissemination, restriction, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of Processing Personal Data. IstanaSlot acts as the Data Controller in respect of the Personal Data it collects from Players.
• "Data Processor" — any third party that processes Personal Data on behalf of the Data Controller pursuant to a contractual arrangement.
• "Consent" — any freely given, specific, informed, and unambiguous indication of the User's wishes by which they signify agreement to the Processing of Personal Data relating to them.
• "Cookie" — a small text file placed on a User's device by the Platform for the purpose of tracking, analytics, personalisation, or session management.
• "KYC" — Know Your Customer procedures, comprising identity verification and document authentication processes.

IstanaSlot collects Personal Data in the following categories. We collect only what is necessary for the purposes identified in Section 6 of this Policy:

IstanaSlot collects Personal Data through the following channels and mechanisms:

• Direct interactions: Data you voluntarily provide when registering a Player Account, completing KYC verification, making deposits or withdrawals via Malaysian payment platforms (including Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Boost, and GrabPay), contacting our support team, or updating your account profile.
• Automated technologies: As you navigate and interact with the Platform, we automatically collect Technical Data and Usage Data using cookies, server logs, web beacons, and similar tracking technologies (see Section 8 for more detail).
• Third-party providers: We may receive Personal Data about you from payment processors, identity verification services, fraud prevention bureaus, analytics providers, and game software suppliers who operate as Data Processors on our behalf.
• Publicly available sources: In connection with our KYC and anti-money laundering obligations, we may consult publicly available registers, sanctions lists, and other lawfully accessible sources to verify the information you have provided.

IstanaSlot processes your Personal Data only where a lawful basis exists for doing so. The legal bases on which we rely are as follows:

• Contractual necessity: Processing that is necessary for the performance of the contract between you and IstanaSlot — including account registration, processing transactions, providing gameplay services, and handling support requests.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, age verification duties, and requests from competent authorities.
• Legitimate interests: Processing necessary for IstanaSlot's legitimate business interests, including fraud prevention, platform security, improving the user experience, and managing responsible gambling obligations — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on consent as the legal basis — for example, for sending direct marketing communications — you retain the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

IstanaSlot uses the Personal Data we collect for the following purposes:

• Account management: To create, administer, maintain, and secure your Player Account, including verifying your identity and processing login requests.
• Service delivery: To provide access to casino games, live dealer tables, sports betting markets (including Liga Super Malaysia, EPL, UFC, and other competitions), and all other Platform features.
• Financial processing: To process deposits and withdrawals through your chosen Malaysian payment method, reconcile transaction records, and manage refunds where applicable.
• Compliance and fraud prevention: To fulfil our KYC, AML, and age verification obligations; to detect, investigate, and prevent fraudulent transactions; and to respond to requests from regulatory or law enforcement authorities.
• Responsible gambling: To monitor gameplay patterns for signs of problem gambling behaviour, to enforce self-exclusion requests, and to administer deposit limits and cooling-off periods.
• Customer support: To respond to your enquiries, resolve complaints, and improve the quality of our support interactions.
• Marketing and personalisation: Where you have provided consent or where our legitimate interests apply, to send you promotional communications about bonuses, seasonal events (including Deepavali Festival promotions), and new features — and to personalise the content you see on the Platform.
• Platform improvement: To analyse usage patterns, conduct A/B testing, troubleshoot technical issues, and make data-informed product decisions that improve the IstanaSlot experience for all players.
• Legal proceedings: To establish, exercise, or defend legal claims.

IstanaSlot does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We may, however, disclose your Personal Data to the following categories of recipients where necessary and proportionate:

• Payment service providers: Including processors and gateways that facilitate transactions through Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong — who receive only the data necessary to execute the relevant transaction.
• Identity verification and KYC providers: Third-party services engaged to perform identity authentication, age verification, and sanctions screening on our behalf.
• Game software suppliers: Providers of casino game content and live dealer streaming technology, who may receive session and gameplay data necessary to operate the relevant game.
• IT and cloud infrastructure providers: Third parties who host, maintain, and secure the technical infrastructure on which the Platform operates.
• Analytics and marketing technology providers: Services used for Platform analytics, email delivery, and personalised content — engaged under strict data processing agreements.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory directive, we will disclose Personal Data to competent authorities. We will notify you of such disclosures where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, reorganisation, or sale of assets, your Personal Data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

All third-party Data Processors engaged by IstanaSlot are required to process your Personal Data solely in accordance with our documented instructions and are contractually bound to implement appropriate security measures.

IstanaSlot uses cookies and similar technologies to operate and improve the Platform. Cookies are small data files stored on your device when you visit the Platform. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function correctly. These include session authentication cookies and security tokens. These cookies cannot be disabled without rendering the Platform non-functional.
• Functional cookies: Enable enhanced functionality and personalisation, such as remembering your language preferences, game lobby filters, and display settings.
• Analytics cookies: Allow us to measure traffic, analyse how players interact with the Platform, and identify areas for improvement. Data collected by analytics cookies is aggregated and anonymised where possible.
• Marketing cookies: Used to track the effectiveness of our promotional campaigns and, where consent has been given, to deliver relevant advertising about IstanaSlot promotions.

You may control and manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality or performance of the Platform. Our cookie settings can also be managed via the cookie consent banner displayed on your first visit to the Platform.

IstanaSlot retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and accounting obligations. Our general data retention principles are as follows:

• Active Player Account data: Retained for the duration of your account relationship with IstanaSlot and for a period of at least five (5) years following account closure, in compliance with applicable anti-money laundering and financial record-keeping requirements.
• Transaction records: Deposit, withdrawal, and gameplay transaction records are retained for a minimum of seven (7) years to meet financial audit and regulatory reporting obligations.
• KYC documentation: Identity verification documents are retained for the statutory minimum period required by applicable regulations, typically a minimum of five (5) years from the date of the last transaction.
• Support and complaint records: Customer support communications are retained for a period of three (3) years from the date of closure of the relevant support case.
• Marketing data: Retained until you withdraw consent or opt out of marketing communications, subject to minimum retention periods required for legal compliance.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in a manner that prevents re-identification.

IstanaSlot implements comprehensive technical and organisational security measures designed to protect your Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include, without limitation:

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption. Sensitive data at rest is encrypted using industry-standard algorithms.
• Access controls: Access to Personal Data within our organisation is strictly limited to personnel who require it for legitimate business purposes, governed by role-based access controls and the principle of least privilege.
• Infrastructure security: Our Platform is hosted on secure, regularly audited cloud infrastructure with firewalls, intrusion detection systems, and continuous security monitoring.
• Penetration testing: We conduct regular security assessments, including third-party penetration testing, to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, IstanaSlot will notify affected individuals and relevant authorities in accordance with applicable legal requirements.

Subject to applicable law and certain legal exceptions, you have the following rights in respect of your Personal Data held by IstanaSlot. To exercise any of these rights, please contact us using the details in Section 15:

IstanaSlot will respond to data rights requests without undue delay and in any event within thirty (30) calendar days of receipt. We may request proof of identity before processing your request to safeguard against unauthorised access to your data.

IstanaSlot strictly prohibits the use of its Platform by any person under the age of 21 years. We do not knowingly collect Personal Data from individuals under the age of 21. Our registration process includes mandatory age declaration and is supplemented by active age verification procedures.

If we become aware that Personal Data has been collected from a person under the age of 21 without appropriate parental consent, we will take immediate steps to delete that data, close the associated account, and void any transactions conducted on that account. If you believe that a minor may have registered an account on our Platform, please contact our support team immediately at the details provided in Section 15.

The Platform may, from time to time, contain references to third-party game studios, content providers, or integrated services. This Policy applies solely to data collected by IstanaSlot through the Platform. We are not responsible for the privacy practices or content of any third-party service that may be integrated into or accessible via the Platform.

We encourage you to review the privacy policies of any third-party providers whose services you use in connection with your IstanaSlot account, including payment processors and game content studios. IstanaSlot accepts no liability for any data processing conducted independently by such third parties outside of the scope of our data processing agreements.

IstanaSlot reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, industry standards, or our own data processing practices. The date of the most recent revision is indicated at the top of this document.

Where changes to this Policy are material — meaning they significantly affect your rights or the manner in which we process your Personal Data — we will provide prominent notice via the Platform and, where practicable, by email to the address associated with your Player Account, prior to the changes taking effect. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how your Personal Data is being handled, please contact our Player Services and Data Privacy team using the details below. We are available 24 hours a day, seven days a week.

When submitting a data rights request, please include your registered account username and a clear description of your request. To protect the security of your account, we may require additional verification before processing your request.