Supraslot Privacy Policy – Malaysian Player Data Protection

1.1 Information You Provide Directly

When you register an account with Supraslot or use our services, we collect the following information:

• Identity information — Full name, date of birth, MyKad number, gender
• Contact information — Email address, mobile phone number, residential address in Malaysia
• Account information — Username, password (stored in encrypted form)
• Financial information — Payment method names (Touch 'n Go, GrabPay, DuitNow, FPX, etc.), bank account numbers, transaction history in MYR
• Identity verification documents (KYC) — MyKad copies, utility bills, bank statements

1.2 Information Collected Automatically

When you use the Supraslot platform, our systems automatically record certain information:

• Technical data — IP address, web browser type, operating system, device type
• Activity data — Pages visited, session duration, game types played, betting history
• Cookies — Small data files that help us remember your preferences and enhance your user experience
• Approximate location data — Based on IP address to ensure geographical compliance

Supraslot uses collected data solely for legitimate purposes directly related to delivering our services to you. Below is a summary of how we use your data:

2.1 Marketing Communications

Supraslot will not send you any marketing communications without your explicit consent. When you register, you have the option to choose whether you wish to receive promotional information, bonus offers, and VIP programme updates. You may withdraw this consent at any time through your account settings or by contacting our team.

Supraslot does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. This is our absolute commitment to all players.

3.1 Authorised Third Parties

Your data may only be shared under very limited circumstances and with strict safeguards in place:

• Payment service providers — Malaysian payment gateway providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX) that process your transactions. They receive only the minimum data required to complete each transaction.
• Game software providers — Licensed gaming companies that provide games on the Supraslot platform. Data shared is limited to game session IDs, with no personally identifiable information included.
• Legal authority — If required by Malaysian law or a valid court order. Supraslot will notify you should we be required to disclose your data, unless prohibited from doing so by law.
• IT service providers — Cloud storage and technical infrastructure providers bound by strict confidentiality agreements with Supraslot.

Supraslot invests seriously in the latest security technology to ensure your personal data is always protected. Our security infrastructure comprises multiple layers of protection:

4.1 Technical Security Measures

• 256-bit SSL/TLS Encryption — All communication between your web browser and Supraslot's servers is encrypted using the same technology employed by Malaysia's leading financial institutions
• Data-at-rest encryption — Data stored in our databases is encrypted using AES-256
• Two-Factor Authentication (2FA) — Available to all players and strongly recommended to be enabled for added protection
• Real-time threat monitoring — An intrusion detection system (IDS) active around the clock to identify and block suspicious activity
• Regular security audits — Independent security assessments are conducted periodically by third-party experts

4.2 Password Management

Your password is never stored in plain text. Supraslot uses a strong hashing algorithm with a unique salt for each account, ensuring your password cannot be recovered — even by Supraslot staff.

4.3 Internal Access Controls

Access to player data within Supraslot's systems is governed by the least privilege principle. Only staff who require access to specific data to carry out their duties are permitted to do so, and all access is recorded in a traceable audit log.

Supraslot uses cookies and similar tracking technologies to enhance the user experience and ensure the platform operates correctly. The following are the types of cookies we use:

5.1 Types of Cookies Used

• Essential Cookies — Required for core platform functions such as session login and security. Cannot be disabled.
• Preference Cookies — Saves your preferences such as language selection and display settings for your convenience.
• Analytics Cookies — Helps us understand how players use the platform for improvement purposes. This data is collected in aggregate and cannot be used to identify individuals.
• Functional Cookies — Enables advanced features to function, including resuming games from a previous session.

5.2 Cookie Controls

You can manage and delete cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the Supraslot platform. Supraslot does not use third-party cookies for advertising or cross-site tracking purposes.

Supraslot fully respects your rights in relation to your personal data, in accordance with Malaysia's Personal Data Protection Act (PDPA). You may exercise the following rights at any time:

6.1 How to Exercise Your Rights

To exercise any of the rights listed above, contact the Supraslot privacy team by email at support@supraslot.ws with the subject line "Privacy Rights Request". Supraslot will respond to your request within 30 working days from the date the request is received. In most cases, we will respond sooner than that.

Supraslot does not retain your personal data for longer than necessary. Retention periods depend on the type of data and applicable legal requirements:

• Active account data — Retained for as long as your Supraslot account remains active
• Financial transaction records — Retained for 7 years after the transaction date, in line with Malaysian accounting and financial legal requirements
• KYC Documents — Retained for 5 years after account closure
• Game activity log — Retained for 3 years for audit and dispute resolution purposes
• Support communication data — Retained for 2 years

Once the retention period expires, data will be securely deleted or anonymised so it can no longer be linked to your identity. The deletion process follows industry-standard methods to ensure data cannot be recovered.

The Supraslot platform is strictly for individuals aged 18 and above. Supraslot does not knowingly collect data from minors. Should we discover that data from an underage individual has been collected, we will take immediate action to delete that data and close the account in question.

Supraslot encourages parents and guardians to monitor their children's internet usage and to use parental control software to block access to online gambling platforms.

If you have any questions, concerns, or complaints regarding Supraslot's Privacy Policy or the way we handle your personal data, we strongly encourage you to reach out to us directly:

• Privacy Email: support@supraslot.ws (subject: "Privacy Enquiry")
• Live Chat: Available on the Supraslot platform, 24 hours a day, 7 days a week
• Language: We accept enquiries in both Bahasa Malaysia and English

We are committed to resolving any privacy concerns you may have promptly and transparently. If you feel we have not addressed your concerns adequately, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.