EvoSlot Privacy Policy

This Privacy Policy ("Policy") sets out the practices of EvoSlot ("EvoSlot", "we", "us", "our") with respect to the collection, use, storage, sharing, and protection of personal data belonging to users ("Player", "you", "your") of the EvoSlot online gaming platform, accessible at evoslot.cam and any associated subdomains or mobile interfaces.

EvoSlot is committed to handling all personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy applies to all personal data collected from players located in Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions — regardless of whether data is collected online, via live chat, via email, or through payment processing channels.

This Policy should be read alongside EvoSlot's Terms & Conditions, which govern the overall use of the Platform, and our Responsible Gambling guidelines, which address the specific handling of responsible gambling self-assessment data.

For the purposes of this Privacy Policy, the following terms carry the meanings ascribed below:

• "Personal Data" means any information that identifies, or could reasonably be used to identify, a natural person, either alone or in combination with other data. This includes name, email address, phone number, device identifiers, and financial account details.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, or deletion.
• "Data Controller" means EvoSlot, which determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" means any third party engaged by EvoSlot to process personal data on its behalf, including payment service providers, game software suppliers, and analytics platforms.
• "Consent" means a freely given, specific, informed, and unambiguous indication of a Player's agreement to the processing of their personal data for one or more stated purposes.
• "KYC Data" means identity verification documents submitted by a Player for the purpose of Know Your Customer compliance, including government-issued photo identification and payment method verification.
• "Cookies" means small text files placed on a Player's device by the Platform for the purpose of session management, preferences storage, analytics, and fraud prevention.

EvoSlot collects personal data in the categories described in the table below. We collect only what is genuinely necessary for the stated purposes and do not engage in speculative or excessive data collection.

EvoSlot collects personal data through the following channels:

• Direct Registration: When you create an Account on EvoSlot, you voluntarily provide identity and contact information.
• KYC Submission: When you submit identity documents for account verification, either at registration or at first withdrawal.
• Financial Transactions: When you make a deposit or request a withdrawal via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, or cryptocurrency channels, relevant transaction data is processed.
• Platform Usage: Technical and gameplay data is collected automatically as you navigate and interact with the Platform.
• Customer Support Interactions: When you contact our support team via Live Chat, email, or WhatsApp, communication records are retained.
• Cookies and Similar Technologies: Session and preference data is collected via browser cookies and similar tracking technologies as described in Section 8.

EvoSlot uses personal data for the following specific and stated purposes:

1. Account Management: Creating, maintaining, and securing your EvoSlot Account, including authentication and two-factor verification.
2. Payment Processing: Facilitating deposits and withdrawals through your chosen Malaysian payment method, and reconciling transaction records.
3. KYC and Regulatory Compliance: Verifying your identity and age (21+) in accordance with applicable anti-money laundering (AML) and counter-terrorism financing (CTF) obligations.
4. Customer Support: Responding to enquiries, resolving disputes, and maintaining support interaction records for quality assurance.
5. Responsible Gambling: Monitoring gameplay patterns to identify potential signs of problem gambling, delivering self-imposed limit controls, and administering self-exclusion requests.
6. Platform Security and Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, and other security incidents.
7. Service Improvement: Analysing aggregated and anonymised usage data to improve game selection, interface design, and support quality.
8. Legal and Regulatory Obligations: Complying with lawful requests from regulators, law enforcement agencies, or courts of competent jurisdiction.

EvoSlot processes personal data under the following legal bases:

• Contractual Necessity: Processing required to perform the contract established when you register an Account and accept the Terms and Conditions — including account creation, payment processing, and bonus administration.
• Legal Obligation: Processing required to comply with applicable AML, CTF, and data protection legislation — including KYC identity verification and transaction record-keeping.
• Legitimate Interests: Processing in pursuit of EvoSlot's legitimate business interests — including fraud prevention, platform security, responsible gambling monitoring, and service improvement — where these interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, informed consent — including optional marketing communications, where applicable. Consent may be withdrawn at any time without affecting the legality of processing carried out prior to withdrawal.

EvoSlot does not sell, rent, or otherwise commercially disclose your personal data to third parties. Data is shared only under the limited circumstances described below, and only to the extent strictly necessary:

• Payment Service Providers: Financial data is shared with payment processors facilitating DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency transaction services. These processors are bound by their own applicable data protection obligations.
• Game Software Providers: Gameplay session data may be shared with licensed game providers to facilitate game delivery, RNG certification audits, and technical support.
• KYC Verification Partners: Identity documents submitted for KYC may be processed by third-party identity verification service providers engaged by EvoSlot under data processing agreements.
• Regulatory and Law Enforcement Authorities: EvoSlot will disclose personal data to competent authorities when required to do so by a lawful order, court ruling, or regulatory mandate.
• Professional Advisers: Legal counsel, auditors, and compliance advisers may access personal data on a strictly need-to-know basis, subject to professional confidentiality obligations.

EvoSlot uses cookies and similar tracking technologies (collectively "Cookies") to operate the Platform efficiently and to enhance your user experience. Cookies are small text files stored on your device when you visit the Platform.

The following categories of Cookies are used by EvoSlot:

• Strictly Necessary Cookies: Essential for the Platform to function. These enable session management, authentication, and security features. They cannot be disabled without affecting core platform functionality.
• Functional Cookies: Enable the Platform to remember your preferences, including language selection (English, Bahasa Melayu, Mandarin), display settings, and responsible gambling limit configurations.
• Analytics Cookies: Collect anonymised data about how players use the Platform — including pages visited, session duration, and error events — to help EvoSlot improve performance and usability. No personally identifiable information is included in analytics data.
• Security Cookies: Used to detect and prevent fraudulent activity, including device fingerprinting for multi-account detection and anomalous login pattern recognition.

EvoSlot retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following indicative retention periods apply:

• Account Data (active accounts): Retained for the duration of the active account relationship and for a period thereafter as required by AML record-keeping regulations.
• KYC Documents: Retained for a minimum of five (5) years following account closure, in accordance with standard financial services record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years following the transaction date for audit, tax, and AML compliance purposes.
• Support Communication Records: Retained for two (2) years following the closure of each support interaction, for dispute resolution and quality assurance purposes.
• Analytics Data: Anonymised and aggregated within six (6) months of collection; original session-level data is deleted thereafter.

Upon expiry of applicable retention periods, personal data is securely deleted, anonymised, or destroyed in accordance with EvoSlot's internal data disposal procedures.

EvoSlot implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, and destruction. These measures include but are not limited to:

• Encryption in Transit: All data transmitted between your device and EvoSlot's servers is encrypted using 256-bit SSL/TLS protocols.
• Encryption at Rest: Sensitive personal data stored on EvoSlot's servers is encrypted using industry-standard symmetric encryption algorithms.
• Access Controls: Personal data is accessible only to EvoSlot personnel and authorised third parties on a strict need-to-know basis, enforced through role-based access controls.
• Two-Factor Authentication (2FA): All EvoSlot internal systems handling personal data require 2FA for administrative access. Players are also encouraged to enable 2FA on their accounts.
• Fraud Monitoring: Automated real-time monitoring systems detect and flag anomalous transaction patterns, unusual login behaviour, and multi-account indicators.
• Regular Security Reviews: EvoSlot conducts periodic internal security reviews and vulnerability assessments of systems handling personal data.

As a player on EvoSlot, you hold the following rights with respect to your personal data. EvoSlot will action all valid requests promptly and without imposing unreasonable conditions or fees.

To exercise any of the above rights, contact EvoSlot's support team via Live Chat or at [email protected]. EvoSlot will verify your identity before actioning any data request to protect against unauthorised disclosure. Requests will be processed within a reasonable timeframe, ordinarily within 30 calendar days of receipt of a valid request.

EvoSlot is strictly for individuals aged 21 years and above. EvoSlot does not knowingly collect, process, or retain personal data from any person under the age of 21. Age verification is a mandatory step during the KYC process and may be requested at any time during an account's lifetime.

If EvoSlot discovers or reasonably suspects that personal data has been collected from a player under the age of 21, the following actions will be taken immediately:

• The Account will be suspended and placed under review
• All funds in the Account will be frozen pending investigation
• All personal data associated with the Account will be identified and, subject to any legal reporting requirements, deleted
• The incident will be logged and reported to relevant authorities if required by applicable law

Parents and guardians are responsible for monitoring and preventing underage access to gambling platforms. If you believe a minor has registered on EvoSlot, please contact us immediately at [email protected].

In the course of its operations, EvoSlot may transfer personal data to, or process data in, countries outside of Malaysia — for example, where game software providers or payment processing infrastructure are hosted in other jurisdictions.

Where such transfers occur, EvoSlot takes appropriate steps to ensure that your personal data remains protected to a standard equivalent to that described in this Policy, including through the use of contractual safeguards (such as data processing agreements with data processors) and by engaging only service providers operating under adequate data protection regimes.

EvoSlot reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or EvoSlot's data processing practices. The "Last Updated" date at the top of this page will reflect the most recent revision.

EvoSlot will endeavour to notify registered players of material changes to this Policy via email or via an in-platform notification. It is your responsibility to review this Policy periodically and to familiarise yourself with any changes. Your continued use of the Platform following publication of a revised Policy constitutes your acceptance of the revised terms.

For any privacy-related enquiry, subject access request, data rectification request, deletion request, or complaint regarding EvoSlot's data practices, please contact our support team through any of the following channels:

• Live Chat: Available daily 8:00 AM – 2:00 AM MYT, with emergency support 24/7. Average response time: 3–5 minutes. Available in English, Bahasa Melayu, and Mandarin.
• Email: [email protected] — Privacy requests receive priority handling with responses within 2 business days.

When submitting a data rights request, please include your registered email address, the specific right you wish to exercise, and any relevant details that will help us process your request efficiently. EvoSlot will verify your identity before actioning any request to safeguard against unauthorised disclosure.