islot treats the protection of your personal data as a fundamental obligation. Here are the six core principles that guide how we handle your information.
islot collects only the personal data that is strictly necessary to provide you with a safe, functional, and compliant gaming experience. We do not collect data for its own sake, and we do not build data profiles for resale to third parties.
All personal data transmitted to and from the islot Platform is protected using 256-bit SSL/TLS encryption. Stored personal data is protected by layered technical and organisational security controls designed to prevent unauthorised access.
islot does not sell, rent, or trade your personal data to any third party for commercial purposes. We share data only with carefully vetted service providers that are contractually bound to maintain appropriate data protection standards.
You have meaningful, enforceable rights over your personal data held by islot. You may access, correct, or request deletion of your data, and you may object to certain processing activities. We respond to all data rights requests within 30 days.
islot does not retain personal data indefinitely. We maintain clear data retention schedules and delete or anonymise personal data once the purposes for which it was collected have been fulfilled and no legal retention obligation requires otherwise.
When we make material changes to this Privacy Policy, we notify active account holders via their registered email address and display a prominent notice on the Platform. We do not silently update data practices without informing you.
This Privacy Policy (hereinafter referred to as "Policy" or "Privacy Policy") is published by islot (hereinafter referred to as "islot", "we", "us", or "our"), the operator of the online gaming and sports betting platform accessible at https://islot.cam (the "Platform"). This Policy explains how islot collects, uses, stores, shares, and protects personal data belonging to individuals who access or use the Platform (hereinafter referred to as "you", "User", or "Player").
islot is committed to handling all personal data in a manner that is lawful, fair, and transparent, and in accordance with applicable data protection legislation, including the Malaysian Personal Data Protection Act 2010 (PDPA) and any other applicable data protection laws or regulations to which islot is subject by virtue of its operations and licensing arrangements.
By registering an Account on the islot Platform, or by continuing to access or use the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should immediately cease using the Platform and contact our support team to arrange closure of your Account.
For the purposes of this Privacy Policy, the following terms shall carry the meanings set out below:
islot collects personal data across the following categories, depending on the nature of your interaction with the Platform:
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, MyKad / passport / driving licence number, nationality | Registration and KYC verification |
| Contact Data | Email address, mobile phone number, residential address (including city, postcode, state) | Registration and account updates |
| Financial Data | Payment method type (e.g., Touch 'n Go, Maybank2u, DuitNow), partial account references, transaction amounts, deposit/withdrawal history | Deposit and withdrawal transactions |
| Gaming Activity Data | Game play history, bet amounts, session durations, wagering patterns, game preferences | Ongoing platform use |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps, connection type | All Platform visits |
| Communications Data | Support chat transcripts, email correspondence, complaint records, survey responses | Customer support interactions |
| Verification Documents | Copies of identity documents, proof of address documents, payment method screenshots | KYC verification process |
islot does not collect or process special categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, or sexual orientation) except where you voluntarily provide such information in the context of a responsible gambling self-assessment, in which case such data is processed solely to provide appropriate responsible gambling support and is never shared with third parties for other purposes.
islot collects personal data through the following principal channels:
islot processes your personal data for the following specific purposes:
islot processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:
islot does not sell, rent, or license your personal data to third parties for their own commercial purposes. We share your personal data only in the following circumstances, and only to the extent necessary for the stated purpose:
All third-party Data Processors engaged by islot are subject to contractual data processing agreements that require them to implement appropriate technical and organisational security measures and to process personal data only in accordance with islot's documented instructions.
islot uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage) on the Platform for the following purposes:
Most web browsers are set to accept cookies by default. You may configure your browser to refuse cookies or to alert you when cookies are being placed on your device; however, disabling certain cookies may impair your ability to use specific features of the Platform. islot does not use cookies for the purpose of serving third-party advertising.
islot retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law or regulatory obligation. The following general retention periods apply:
Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting anonymised data may be retained and used for statistical and analytical purposes without restriction, as it will no longer constitute personal data.
islot implements a multi-layered approach to personal data security, incorporating both technical and organisational controls designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:
Notwithstanding the measures described above, no method of data transmission or storage is completely secure. islot cannot guarantee the absolute security of personal data transmitted to or stored on the Platform. You are encouraged to take your own precautions to protect your Account credentials and to notify islot immediately if you suspect any unauthorised access to your Account.
Subject to the provisions of the PDPA and any other applicable data protection legislation, you have the following rights in respect of the personal data that islot holds about you:
To exercise any of the rights listed above, please submit a written request to [email protected] with the subject line "Data Rights Request". islot will respond to all valid data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case islot will notify you of the extension and the reasons for it.
islot may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to an unauthorised party.
The islot Platform is strictly intended for individuals who are 21 years of age or older. islot does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21.
If islot becomes aware that personal data has been collected from an individual who is under the age of 21, islot will take immediate steps to close the associated Account, delete the relevant personal data, and retain only such records as may be required to demonstrate compliance with the age verification obligations and to prevent re-registration.
Parents, guardians, or any third party who has reason to believe that a minor has registered on the islot Platform are encouraged to contact islot immediately at [email protected] so that appropriate action can be taken without delay.
islot's Platform serves Malaysian players as its primary audience, and its principal data processing activities are structured to serve the Malaysian market. However, certain Data Processors engaged by islot — including cloud infrastructure providers, game content providers, and fraud screening services — may operate servers or processing infrastructure outside of Malaysia.
Where personal data is transferred outside Malaysia to countries that may not provide an equivalent level of data protection, islot ensures that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses consistent with applicable regulatory requirements imposed by applicable data protection legislation.
If you would like further information about the international data transfer safeguards implemented by islot, please contact our support team at [email protected].
islot reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Effective Date" displayed at the top of this page reflects the date on which the current version of the Policy came into force.
Where changes to this Privacy Policy are material — meaning they significantly affect how we collect, use, or share your personal data — islot will provide advance notice to active Account holders via their registered email address, and will display a prominent notice on the Platform for a reasonable period prior to the changes taking effect.
Continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement and acceptance of the updated Policy. If you do not accept the revised Policy, you should cease using the Platform and contact support to arrange Account closure.
If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise your data rights as described in Section 11, please contact islot's data privacy team through the following channel:
When submitting a data rights request, please include your Account username (if applicable) and a clear description of your request to allow islot's team to process your enquiry as efficiently as possible. Identity verification may be required before certain requests can be actioned.
If you are not satisfied with islot's response to your data privacy concern, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.
islot is built on transparency. Play with confidence knowing that your personal data is protected and that you are always in control.