Privacy Policy

This Privacy Policy ("Policy") sets out the manner in which Pawangslot ("we", "us", "our", "the Platform", "the Operator") collects, uses, stores, shares, and protects the personal data of individuals ("you", "the User", "the Player") who access or use the Pawangslot online gaming platform available at pawangslot.cam.

We recognise that your personal data belongs to you, and we take our obligations as a data handler seriously. This Policy has been prepared in accordance with internationally recognised data protection principles, including those articulated under the General Data Protection Regulation (GDPR) framework and comparable international standards.

By registering an Account on Pawangslot, accessing our website, or engaging with any feature of our Platform, you acknowledge that you have read, understood, and consented to the data practices described in this Policy. This Policy forms part of our broader agreement with you, alongside our Terms and Conditions and Responsible Gambling Policy.

In this Privacy Policy, the following terms have the meanings set out below:

The Data Controller responsible for your personal data in connection with your use of the Pawangslot Platform is the operator of pawangslot.cam, operating under an international gaming licence. The Platform is designed to serve players from Malaysia and other permitted jurisdictions.

For all data protection enquiries, requests to exercise your rights, or concerns about how your personal data is handled, you may contact us through the channels listed in Section 16 (Contact Us) of this Policy. We will respond to all verified data subject requests within the timeframes set out in applicable data protection law and within thirty (30) days in all cases.

Pawangslot collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include the following:

Pawangslot collects personal data through the following channels and mechanisms:

• Direct submission by you: Information you provide when completing the registration form, submitting KYC documents, making deposits or withdrawal requests, contacting customer support, or updating your account profile.
• Automated technical collection: Data collected automatically when you access or interact with the Platform, including via cookies, web server logs, session identifiers, and similar tracking technologies (see Section 11).
• Payment processors and e-wallet providers: When you make deposits or withdrawals via Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, FPX, or other supported methods, the relevant payment provider may share transaction confirmation data with us in order to credit or debit your account balance.
• Third-party identity verification services: During KYC processing, we may use third-party services to verify the authenticity of identity documents submitted by Players. These services process document images solely for the purpose of verification.
• Fraud detection and compliance services: Data may be received from fraud prevention networks and compliance databases as part of our anti-money laundering (AML) and know-your-customer (KYC) obligations.

Pawangslot processes your personal data for the following specific purposes:

1. Account Creation and Management: To register your account, maintain your player profile, and provide access to all Platform features.
2. Identity Verification (KYC): To verify your identity, confirm your age (21+ requirement), prevent underage gambling, and comply with anti-money laundering obligations.
3. Payment Processing: To process deposit and withdrawal transactions via supported Malaysian payment methods including Touch 'n Go eWallet, DuitNow, FPX, and bank transfers to Maybank, CIMB, Public Bank, and Hong Leong Bank.
4. Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance.
5. Responsible Gambling: To monitor for signs of problem gambling behaviour, enforce deposit limits and self-exclusion requests, and provide responsible gambling tools as described in our Responsible Gambling Policy.
6. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other unlawful conduct.
7. Legal and Regulatory Compliance: To comply with applicable laws, regulations, court orders, and licensing obligations, including AML reporting requirements.
8. Platform Improvement: To analyse usage patterns, identify technical issues, and improve Platform performance, game selection, and user experience.
9. Marketing Communications: To send you promotional offers, bonus notifications, and relevant gaming content — only where you have consented to receive such communications and have not subsequently opted out.

Pawangslot does not use your personal data for automated decision-making that produces legal or similarly significant effects on you, except where strictly necessary for KYC or fraud detection purposes, in which case you retain the right to request human review of any automated decision.

Where internationally recognised data protection frameworks apply, Pawangslot relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing of identity, contact, financial, and transaction data is necessary to perform the contract between you and Pawangslot (i.e., to operate your account and process your gaming activity).
• Legal Obligation: Processing of KYC documents and transaction monitoring data is necessary to comply with our legal obligations under anti-money laundering regulations and our licensing conditions.
• Legitimate Interests: Processing of technical and usage data for fraud prevention, platform security, and service improvement is carried out in pursuit of our legitimate interests as an operator, provided those interests do not override your fundamental rights and freedoms.
• Consent: Processing for marketing communications is carried out solely on the basis of your explicit consent. You may withdraw this consent at any time by updating your communication preferences in your Account settings or by contacting our support team.

Pawangslot does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your personal data only in the limited circumstances described below, and only to the minimum extent necessary:

• Payment Service Providers: Transaction data is shared with relevant payment processors — including the operators of Touch 'n Go eWallet, Boost, GrabPay, FPX, and participating Malaysian banks — solely for the purpose of processing your deposit or withdrawal instruction.
• Identity Verification Services: KYC documents may be shared with third-party identity verification providers for the purpose of authenticating the documents you submit. These providers operate under strict data processing agreements.
• Fraud Prevention Networks: In cases of suspected fraud or AML concern, relevant data may be shared with fraud prevention databases or law enforcement agencies as required by law.
• Regulatory Authorities: Where required by our international gaming licence or applicable law, we may be obliged to disclose certain player data to regulatory bodies or law enforcement authorities. We will only make such disclosures to the extent legally required and will notify you where legally permissible to do so.
• Technology and Service Providers: We engage third-party service providers for platform hosting, customer support software, analytics, and similar operational functions. All such providers are contractually bound to process personal data only on our instructions and to maintain appropriate security standards.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to data handling practices that result from it.

Pawangslot retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations.

As a general principle, account data and associated transaction records are retained for a minimum of five (5) years following account closure, in order to comply with anti-money laundering record-keeping obligations and to resolve any post-closure disputes. KYC documents are retained for the same period.

Technical and usage data (such as IP logs and session data) is typically retained for a shorter period of twelve (12) months unless it is associated with an ongoing investigation, dispute, or legal proceeding, in which case it will be retained until that matter is resolved.

Marketing preference data is retained until you withdraw your consent or for a period of two (2) years of account inactivity, whichever is earlier. Customer support communications are retained for three (3) years from the date of the last interaction.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.

Pawangslot implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your browser or device and the Pawangslot Platform is encrypted using Transport Layer Security (TLS) with a minimum of 256-bit encryption strength.
• Encryption at rest: Sensitive data stored in our systems, including KYC documents, financial data, and password hashes, is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data within our organisation is restricted on a strict need-to-know basis. Personnel with access to personal data are subject to confidentiality obligations and security training.
• Password security: User account passwords are stored as cryptographic hashes. Pawangslot staff cannot view your password in plain text and will never request it.
• Intrusion detection and monitoring: Our systems are monitored for anomalous activity, potential intrusion attempts, and security incidents on an ongoing basis.
• Data breach response: We maintain an incident response plan for data security breaches. In the event of a breach affecting your personal data, we will notify you and relevant authorities as required by applicable law.

While we take every reasonable precaution to protect your data, no method of internet transmission or electronic storage is entirely secure. You are responsible for maintaining the security of your own Account credentials and for notifying us immediately if you suspect any unauthorised access.

Pawangslot uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain your session state, and collect analytics data. By continuing to use our Platform after being presented with this Policy, you consent to our use of cookies as described below.

The following categories of cookies are used on the Pawangslot Platform:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core features such as account login sessions, security tokens, and session management. These cannot be disabled without materially impairing Platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised information about how visitors use the Platform — pages visited, time spent on each page, error messages encountered — which helps us improve Platform performance and user experience. No personally identifiable information is collected by these cookies.
• Functionality Cookies: These cookies remember your preferences and settings (such as preferred display language and notification settings) to provide a more personalised experience across sessions.
• Marketing and Preference Cookies: Where you have consented to marketing communications, these cookies help us show you relevant promotional content. You may opt out of marketing cookies at any time through your Account settings.

You may control cookie settings through your browser preferences. Note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling performance or marketing cookies will not affect core Platform functionality.

Subject to applicable law and our legitimate interests as an operator, you have the following rights with respect to your personal data held by Pawangslot. To exercise any of these rights, please contact us via the channels in Section 16.

We will respond to all data rights requests within thirty (30) days of receipt of a verified request. In complex cases, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it. We may need to verify your identity before processing a rights request to ensure we do not disclose data to an unauthorised party.

The Pawangslot Platform is strictly intended for adults aged twenty-one (21) years and above. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes a mandatory date-of-birth declaration, and KYC verification is used to confirm the age of all Players before withdrawals are processed.

If we become aware or have reasonable grounds to suspect that personal data has been submitted by or on behalf of an individual under 21 years of age, we will immediately suspend the relevant account, delete the personal data collected, and take appropriate steps to prevent further access by that individual.

Parents and guardians who become aware that a minor may have registered or attempted to use the Pawangslot Platform should contact us immediately at [email protected] so that appropriate action can be taken without delay.

As an internationally operated platform, Pawangslot may transfer your personal data to servers and service providers located outside of Malaysia. Where such transfers occur, we take steps to ensure that your personal data receives an equivalent level of protection as it would in Malaysia, including through the use of contractual data protection clauses with our service providers.

Personal data is not transferred to third countries for purposes other than those described in this Policy. Where required by applicable law, we will seek additional safeguards before making international data transfers, including adequacy decisions, standard contractual clauses, or equivalent mechanisms.

Pawangslot reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. We will notify you of material changes by posting an updated version of this Policy on the Platform and, where appropriate, by sending a notification to the email address registered on your Account.

The "Effective Date" at the top of this Policy reflects the date on which the current version came into force. Your continued use of the Platform after the effective date of any revised Policy constitutes your acknowledgment of and agreement to the updated terms.

We encourage you to review this Policy periodically to stay informed about how we protect your personal data. If you disagree with any changes to this Policy, you should cease using the Platform and may request account closure in accordance with our Terms and Conditions.

For any questions, requests, or concerns relating to this Privacy Policy or to the processing of your personal data by Pawangslot, please contact us through the following channels:

• Live Chat: 24/7 live support is available directly on the Pawangslot Platform dashboard. This is the fastest channel for urgent privacy concerns such as suspected unauthorised account access.
• Email: [email protected] (plain text — not a clickable link). For formal data subject requests (access, erasure, portability), please use the subject line "Data Rights Request — [Your Username]".
• Response Time: We acknowledge all privacy-related enquiries within five (5) business days and aim to provide a substantive response within thirty (30) days.

For general guidance on your rights regarding personal data, you may also consult resources available from internationally recognised data protection authorities. Further information about responsible gambling, account management, and our Terms and Conditions is available in the links below.