Winterslot Privacy Policy

Definitions

"Personal Data" means any information relating to an identified or identifiable natural person, including name, contact details, payment references, IP address, device identifiers, and usage logs. "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, and deletion. "Controller" means Winterslot, which determines the purposes and means of processing. "Processor" means a third party that processes Personal Data on behalf of Winterslot under contract.

"KYC" means Know Your Customer verification, which may require a government-issued identity document, proof of address, selfie, payment evidence, or source-of-funds information. "Service" encompasses the Winterslot website, casino games, sports betting markets, promotions, payment features, and account tools.

Information We Collect

Winterslot may collect the following categories of Personal Data:

• Registration data: Name, username, date of birth, email address, mobile number, and country or city of residence (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam).
• Identity verification data: Copies of government-issued identification (MyKad, passport), proof of address, and supporting documents submitted for KYC.
• Payment information: Transaction references associated with Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency channels. Full card or account numbers are typically handled by payment processors, not retained by Winterslot.
• Account activity data: Deposit amounts, wager history, game session records, bonus redemptions, withdrawal requests, and account preference settings.
• Technical data: IP address, browser type, device identifiers, operating system, session duration, pages visited, referral source, and cookies or similar identifiers.
• Communications data: Messages sent through live chat, email to [email protected], or any formal complaint submitted in writing.
• Responsible gambling data: Deposit limits set, cooling-off periods, self-exclusion requests, and related account controls applied to your profile.

Winterslot does not deliberately collect sensitive personal data beyond what is strictly required for legal identity verification. You should not include unsolicited sensitive information in communications to our support team.

How We Use Your Data

Winterslot uses Personal Data for the following purposes:

• Creating and managing your account and verifying your identity in accordance with KYC obligations.
• Processing deposits, MYR withdrawals, cryptocurrency transactions, and associated payment communications.
• Providing casino games, live dealer products, slot experiences, and sports betting markets including EPL, Liga Super Malaysia, UFC, and live football.
• Administering bonuses, cashback, loyalty points, promotions, and VIP tier benefits.
• Detecting, investigating, and preventing fraud, money laundering, unauthorised account access, and abuse of promotional offers.
• Applying responsible gambling tools such as deposit limits, session reminders, cooling-off periods, and self-exclusion controls.
• Communicating with you about account activity, security alerts, support responses, and where consented, promotional updates.
• Improving the website, personalising content, analysing traffic patterns, and resolving technical issues affecting the Winterslot platform.
• Complying with applicable legal, regulatory, taxation, anti-money-laundering, and licensing requirements.

Legal Basis for Processing

Winterslot relies on one or more of the following lawful bases when processing Personal Data:

• Contract performance: Processing is necessary to provide you with the services you requested upon registration, including account management, payments, and game access.
• Legal obligation: Processing is required to comply with applicable anti-money-laundering, counter-terrorism-financing, KYC, age-verification, and responsible gambling obligations.
• Legitimate interests: Processing is reasonably necessary to prevent fraud, maintain platform security, operate responsible gambling controls, conduct analytics for service improvement, and handle support communications, provided these interests are not overridden by your rights.
• Consent: Where Winterslot requests your consent for a specific purpose, such as optional marketing communications, you may withdraw that consent at any time by contacting support. Withdrawal does not affect the lawfulness of prior processing.

Disclosure to Third Parties

Winterslot does not sell, rent, or trade your Personal Data. We may disclose data to:

• Payment service providers and e-wallet operators to process deposits and withdrawals through approved channels such as DuitNow, Touch 'n Go eWallet, Boost, GrabPay, FPX, and affiliated Malaysian banks.
• Identity verification and KYC partners who assist in age verification, document checks, and fraud-screening services.
• Game and platform technology providers who operate server infrastructure, casino software, live dealer studios, and sports data feeds used to deliver the Winterslot service.
• Fraud-prevention and security services engaged to detect irregular activity, abuse, or suspicious transactions.
• Legal and regulatory authorities where disclosure is required by a court order, regulatory direction, law enforcement request, or applicable legislation.
• Professional advisers including legal counsel and auditors, subject to appropriate confidentiality obligations.

Third-party processors are required to process data only in accordance with Winterslot's instructions and to implement appropriate security measures.

International Data Transfers

Winterslot may process or store data in jurisdictions outside Malaysia where our technology providers, game studios, KYC partners, or payment processors operate. Where data is transferred internationally, Winterslot takes steps to ensure the transfer is subject to contractual protections or that the recipient jurisdiction provides an adequate level of data protection.

By using Winterslot, you acknowledge that your Personal Data may be processed in data centres or through service providers located in other countries, subject to the protections described in this Policy.

Cookies and Tracking Technologies

Winterslot uses cookies, session tokens, and similar technologies to:

• Maintain your logged-in session and preserve account preferences.
• Detect suspicious login patterns and protect against account takeover.
• Analyse traffic flows, page performance, and feature usage to improve the platform.
• Deliver relevant content and, where consented, personalised promotional messages.

You may manage cookie settings through your browser. Disabling certain cookies may affect site functionality, login persistence, or the correct display of account information.

Data Security

Winterslot implements administrative, technical, and physical security measures to protect Personal Data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for data transmitted between your device and our servers.
• Hashed storage of account credentials so that passwords are not retained in recoverable plaintext.
• Access controls that limit which personnel can view account and payment information.
• Security monitoring and anomaly-detection systems operating continuously.
• Periodic review of data-handling procedures and third-party security obligations.

No transmission over the internet is completely secure. You are responsible for keeping your Winterslot login credentials confidential, using a private device, and reporting suspected unauthorised access promptly to our support team.

Data Retention

Winterslot retains Personal Data only as long as necessary for the purposes described in this Policy or as required to satisfy legal, regulatory, accounting, or dispute-resolution obligations.

• Active account records: Retained for the duration of your Winterslot account and a reasonable period after closure.
• KYC and identity documents: Retained for up to seven years following account closure to comply with anti-money-laundering requirements.
• Transaction and wager history: Retained for up to seven years for financial record, tax, and audit purposes.
• Support communications: Retained for a period necessary to handle ongoing queries, disputes, or compliance reviews.
• Technical and log data: Typically retained for up to 12 months, subject to security investigation requirements.

When retention periods expire, data is securely deleted or anonymised so that it can no longer be attributed to an individual player.

Your Rights

Subject to applicable law, you may have the following rights in relation to your Personal Data held by Winterslot:

• Right of access: Request a copy of the Personal Data Winterslot holds about you.
• Right to rectification: Request correction of inaccurate or incomplete data in your account profile.
• Right to erasure: Request deletion of your Personal Data where it is no longer necessary for the purposes collected, subject to legal retention obligations.
• Right to restriction: Ask Winterslot to restrict processing of your data in certain circumstances while a dispute or accuracy query is resolved.
• Right to withdraw consent: Where processing is based on your consent, withdraw it at any time without affecting prior lawful processing.
• Right to data portability: Where technically and legally feasible, receive a structured copy of data you have provided to Winterslot.
• Right to object: Object to processing based on legitimate interests in circumstances specific to your situation.

To exercise any of these rights, contact Winterslot support via on-site live chat or at the plain-text email address [email protected]. Include your account username and a description of the request. We may need to verify your identity before processing it. Winterslot aims to acknowledge requests within three business days and to respond substantively within thirty calendar days.

Children and Minors

Winterslot is strictly for persons aged 21 and above. We do not knowingly collect, process, or retain Personal Data from anyone under the age of 21. If you believe a person under 21 has registered or provided data to Winterslot, please contact support immediately so that the account can be reviewed and any affected data removed or restricted in accordance with this Policy.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing gambling websites. Winterslot applies age-verification controls at registration and may request identity evidence at any point to confirm account eligibility.

Changes to This Privacy Policy

Winterslot may update this Privacy Policy periodically to reflect changes in data-handling practices, legal requirements, service features, or payment method integrations. The updated Policy will be published on this page with a revised effective date. For material changes affecting how we process your data, we will take reasonable steps to notify active account holders through account notifications or on-site notices.

Continued use of Winterslot following a published change constitutes your acceptance of the revised Policy. If you do not accept the revised terms, please stop using the service and close your account through our support team.

Contact and Complaints

For questions, data access requests, correction requests, deletion requests, or privacy complaints, please contact the Winterslot support team through on-site live chat (available 24/7) or at the plain-text email address displayed below. Do not include passwords or one-time verification codes in any correspondence.

If you are not satisfied with Winterslot's response to a privacy complaint, you may have the right to escalate the matter to a relevant data protection authority under the laws applying to you. Winterslot will cooperate with reasonable regulatory enquiries concerning the processing of Personal Data.