Privacy Policy Indoslot88 –
Data Protection Malaysian Players

Indoslot88 is an online entertainment platform that has been operating since 2019 with a dedicated focus on the Malaysian market. We understand that our players' trust is the foundation of everything we do, and that trust begins with responsible and transparent data management.

This Privacy Policy applies to all personal information collected through:

• The Indoslot88 website at indoslot88.biz and all associated subdomains
• The Indoslot88 mobile app (where available) for Android and iOS
• Interactions with the Indoslot88 customer support team via live chat, email, or Telegram
• Any other communication channel between you and Indoslot88

This Privacy Policy does not apply to third-party websites or services that you may access via links within the Indoslot88 platform — each third party has its own separate privacy policy, and Indoslot88 is not responsible for their privacy practices.

Indoslot88 only collects information that is necessary to provide platform services, ensure account security, and comply with applicable legal requirements. The following are the categories of data we collect:

A. Information You Provide Directly

• Registration information: Your full name, date of birth, phone number, email address, and username chosen when registering your Indoslot88 account.
• Identity verification: Copies of your MyKad, passport, or other official identification documents submitted for account verification (KYC).
• Financial information: Bank account numbers, e-wallet details (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow), or FPX information used for deposits and withdrawals. Indoslot88 does not store credit or debit card numbers directly — all card processing is handled by certified third-party payment processors.
• Support communications: The content of messages, complaints, enquiries, and feedback you send to the Indoslot88 customer support team.
• Account preferences: Your responsible gaming limit settings, marketing communication preferences, and other account configurations you have saved.

B. Automatically Collected Information

• Usage data: Gameplay activity logs, betting history, deposits, withdrawals and bonus transactions within the Indoslot88 platform.
• Technical data: IP address, browser type, operating system, device model, screen resolution, and other technical information automatically transmitted by your device when accessing the platform.
• Approximate location data: Approximate location based on IP address to verify that you are accessing from a permitted jurisdiction and to detect access attempts from suspicious locations.
• Session data: Login timestamps, session duration, pages visited and actions taken during active sessions on the Indoslot88 platform.
• Cookie data: Information collected via cookies and similar tracking technologies — see Section 6 for full details.

Indoslot88 uses collected personal data solely for legitimate, necessary purposes directly related to the provision of our platform services. The specific purposes for which data is used are as follows:

• Account management: Creating and managing your member account, verifying your identity and credentials, and maintaining the security and integrity of your Indoslot88 account.
• Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX (Maybank2u, CIMB Clicks), and other local banks; processing winning withdrawals; managing bonuses and promotions.
• Provision of gaming services: Providing access to slots, Live Casino, lottery, football betting, badminton, e-sports, and all other Indoslot88 entertainment products.
• Customer support: Responding to enquiries, resolving disputes, investigating complaints and providing technical assistance to Indoslot88 members.
• Security and fraud prevention: Detecting and preventing fraudulent activity, money laundering, account abuse, and other security threats against the Indoslot88 platform and its members.
• Legal compliance: Fulfilling applicable legal and regulatory obligations, including Malaysia's PDPA requirements and anti-money laundering (AML) reporting obligations.
• Platform improvements: Analysing usage patterns in aggregate (not at an individual level) to improve the overall performance, features and user experience of the Indoslot88 platform.
• Service communications: Sending important account-related notifications, security updates, terms changes, and other information necessary for the operation of your account.
• Marketing (with consent): Sending promotional information, bonus offers and platform news from Indoslot88 to members who have opted in to receive marketing communications.

Indoslot88 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, there are limited situations where Indoslot88 needs to share your data with carefully selected third parties in order to deliver our platform services:

• Payment processing providers: Licensed payment service providers that handle your deposit and withdrawal transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, and other local Malaysian banks. These providers receive only the minimum data necessary to process your transactions.
• Game providers: Game software providers such as Pragmatic Play, PGSoft, Evolution Gaming, and others may receive session data required to operate your games. These providers are bound by strict data confidentiality agreements with Indoslot88.
• Infrastructure service providers: Cloud service providers, server hosting providers, and other technology vendors that supply the technical infrastructure for the Indoslot88 platform.
• Regulatory bodies and law enforcement agencies: Indoslot88 may be required to disclose personal data to Malaysian government authorities, regulatory bodies, or law enforcement agencies when mandated to do so by law, court order, or valid legal process.
• Analytics service providers: Web analytics tools used to monitor the performance and usage of the Indoslot88 platform — data shared is in aggregated form and contains no individual identifiers.

All third parties that receive personal data of Indoslot88 members are bound by strict data protection agreements and may only use that data for purposes specifically authorised by Indoslot88. We ensure that every third-party provider meets data security standards equal to or exceeding those we apply ourselves.

The security of your personal data is Indoslot88's top priority. We implement comprehensive technical and organisational security measures to protect your data from unauthorised access, disclosure, alteration, or accidental destruction.

Technical Security Measures

• Data encryption in transit: All communications between your browser and Indoslot88's servers are encrypted using TLS 1.3 with a 256-bit SSL certificate — none of your data can be read while in transit.
• Data encryption at rest: Sensitive personal data such as identification numbers and payment information is stored in encrypted form within Indoslot88's secure databases.
• Layered access controls: Access to player data is restricted on a "need-to-know" basis — only staff who require the data to carry out their authorised duties are permitted to access it.
• 24/7 Monitoring: The Indoslot88 cybersecurity team continuously monitors the platform to detect and respond to any suspicious activity or security threats.
• Regular penetration testing: Indoslot88 conducts regular independent security testing to identify and address any vulnerabilities before they can be exploited.
• Two-factor authentication (2FA): 2FA security options are available on all Indoslot88 accounts to add an extra layer of protection to your login process.

While Indoslot88 takes all reasonable steps to protect your data, no security system is entirely foolproof. You also play an important role in safeguarding your data — use a strong password, never share your login credentials, and promptly report any suspicious activity on your account to our support team.

Indoslot88 uses cookies and similar tracking technologies to keep the platform functioning properly, improve the user experience, and analyse platform usage patterns in aggregate. The following are the types of cookies we use:

• Essential cookies (required): Required for the basic operation of the Indoslot88 platform — including login session authentication, CSRF security, and maintaining language preferences. The platform cannot function properly without these cookies.
• Performance cookies: Collects information on how visitors use the Indoslot88 platform — most frequently visited pages, load times, and errors encountered. This information is used to improve overall platform performance.
• Functional cookies: Remembering your preferences — such as your preferred language, default betting denomination, and other interface settings — to provide a more personalised experience each time you return to Indoslot88.
• Analytics cookies: Used to understand how users interact with the platform in aggregate — this information helps us make better decisions about feature development and platform improvements.

You can control and manage cookies through your internet browser settings. Please note, however, that blocking or deleting essential cookies may affect the functionality of the Indoslot88 platform and your gaming experience. For guidance on managing cookies in popular browsers (Chrome, Firefox, Safari), please refer to the help documentation for your respective browser.

As an Indoslot88 member and in accordance with Malaysia's Personal Data Protection Act (PDPA), you have the following rights with respect to your personal data:

To exercise any of the rights above, please contact the Indoslot88 support team by email at support@indoslot88.biz clearly stating the right you wish to exercise along with your account details for identity verification. Indoslot88 does not charge any fee to process legitimate privacy rights requests.

Please note that some deletion requests may not be fully fulfilled where Indoslot88 has a legal or regulatory obligation to retain the data — for example, financial transaction records required for AML compliance purposes. In such cases, Indoslot88 will inform you of the applicable limitations.

Indoslot88 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal obligations. The following are our general data retention guidelines:

• Active account data: Retained for the duration your Indoslot88 account is active, plus the minimum retention period required by law.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date, in line with Malaysian legal requirements for financial record-keeping and AML compliance.
• Game activity logs: Retained for 2 years for dispute resolution and security review purposes, then deleted or anonymised.
• Customer support records: Retained for 3 years after the last interaction for training, service improvement, and related case history reference purposes.
• Marketing data: Retained until you withdraw your consent to receive marketing communications or specifically request deletion.
• Cookie data: This depends on the type of cookie — session cookies are deleted automatically when you close your browser; persistent cookies have a set expiry period ranging from 30 days to 2 years.

Once the applicable retention period expires, Indoslot88 will securely delete or anonymise your data so that it can no longer be linked to your identity. The deletion process is carried out using methods that ensure the data cannot be recovered.

The Indoslot88 platform is exclusively for individuals aged 18 and above. We do not knowingly collect any personal data from anyone under the age of 18.

The Indoslot88 registration process requires age verification, and Indoslot88 reserves the right to request age verification documents (MyKad or other official documents) at any time to confirm that users meet the platform's minimum age requirement.

Should Indoslot88 discover that personal data of a minor has been collected inadvertently, we will take immediate steps to delete that data, close the associated account, and return any applicable funds to the parent or legal guardian.

Indoslot88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or new platform features. When we make material changes, we will:

• Updating the "Last Updated" date at the top of this page
• Sending notifications to members via email to their registered address
• Displaying a special notice within the Indoslot88 platform upon your next login

Continued use of the Indoslot88 platform after a revised Privacy Policy takes effect will be considered acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how Indoslot88 handles your personal data.

Previous versions of this Privacy Policy are available upon request — contact the Indoslot88 support team if you require a copy of an earlier version for reference purposes.

If you have any questions, concerns, or requests regarding this Privacy Policy or how Indoslot88 handles your personal data, please do not hesitate to contact us. Our team is ready to assist in both Bahasa Malaysia and English.

We are committed to responding to all privacy-related enquiries within 14 business days. For more complex data rights requests, a response may take up to 30 business days — we will notify you if a longer timeframe is required and explain the reasons.