Privacy Policy sl88 — Our Commitment to Protecting Your Data

1 sl88 Privacy Introduction and Commitment

Sl88 understands that privacy is not merely a legal requirement — it is the foundation of trust between a platform and its players. From day one of operations, sl88 has built a data management system centred on security and transparency, ensuring that every piece of information you provide is handled with the utmost integrity.

This Privacy Policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and international best practices in data protection. We are committed to ensuring that your personal data will not be used beyond the scope stated in this document, and that you always retain control over your own personal information.

Sl88 has appointed a Data Protection Officer responsible for continuously monitoring compliance with this privacy policy, handling privacy-related enquiries and ensuring all sl88 staff understand and adhere to their data protection obligations.

2 Types of Personal Data Collected

Sl88 only collects data that is genuinely necessary to provide a safe, fair and responsible service. The following are the categories of data we may collect from you:

Sl88 does not collect sensitive data such as health information, religious beliefs or political views except in very limited circumstances and with your explicit consent. Biometric data is not collected by sl88 except for identity verification purposes permitted by law.

3 Purpose of Data Collection and Use

Every piece of data collected by sl88 has a clear and legitimate purpose. sl88 does not collect more data than necessary, and does not use data for purposes unrelated to the provision of platform services.

• Account management: Creating, verifying and managing player accounts securely — including the login process, two-factor authentication and account recovery.
• KYC and legal compliance: Meeting legal requirements related to identity verification, anti-money laundering (AML) compliance and local regulatory obligations.
• Transaction processing: Processing deposits, withdrawals and bonus transfers accurately and promptly to the correct account.
• Platform security: Detecting and preventing fraudulent activity, unauthorised access, system manipulation and other cybersecurity threats.
• Service improvement: Analysing usage patterns in aggregate to improve the interface, performance and overall player experience.
• Service communications: Sending important notifications related to your account, transactions, security updates and policy changes.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and offering appropriate assistance when needed.
• Authorised marketing: Sending promotional information and exclusive offers — only to players who have consented to receive marketing communications.

4 Third-Party Data Sharing and Disclosure

Sl88 does not share, sell or disclose your personal data to third parties without your consent, except in the limited circumstances described below. Any data sharing is carried out under strict contractual controls to ensure those third parties adhere to equivalent data protection standards.

• Payment service providers: Required transaction information is shared with payment gateway providers such as FPX, Maybank2u, CIMB Clicks, TNG eWallet and GrabPay solely to process your financial transactions.
• Game providers: Minimum required data is shared with licensed game providers to enable game access and compliance verification.
• Regulatory authorities: sl88 is required to disclose data when mandated by law, court order or a competent Malaysian enforcement agency.
• Technical service providers: Cloud infrastructure, cybersecurity and analytics providers bound by strict data confidentiality agreements.
• Fraud prevention: Limited information may be shared with industry fraud prevention agencies to protect all players within the platform ecosystem.

In the event of a merger, acquisition, or sale of sl88 business assets, player data may be transferred to the successor entity — however, players will be notified in advance and given the option to delete their account if they do not agree.

5 sl88 Data Security Measures

Sl88 continuously invests in high-grade cybersecurity infrastructure to ensure your data is always protected against unauthorised access, breaches or misuse. The following are the layers of protection sl88 employs:

• 256-bit SSL/TLS encryption: All data transmitted between your device and sl88's servers is fully encrypted using 256-bit SSL/TLS protocol — the same security standard used by the world's leading banking institutions.
• Data at-rest encryption: Sensitive data stored in the sl88 database is also encrypted using AES-256 encryption, ensuring data remains unreadable even in the event of a database breach attempt.
• Two-factor authentication (2FA): sl88 provides and encourages the use of 2FA on all accounts to add an extra layer of protection during the login process.
• 24/7 Monitoring: sl88's automated security monitoring system operates at all times to detect suspicious activity, intrusion attempts and system anomalies.
• Internal access controls: Only authorised sl88 staff with a legitimate business need may access player personal data — with access records audited on a regular basis.
• Regular penetration testing: sl88 conducts regular security testing and audits by independent security experts to identify and close any system vulnerabilities.

6 Cookies and Tracking Technologies

Sl88 uses cookies and similar tracking technologies to enhance your experience on the sl88 platform, understand how the platform is used, and tailor content to your needs. Cookies are small text files stored on your device when you visit the sl88 website.

The following are the types of cookies sl88 uses:

• Essential Cookies: Required for core sl88 platform functions such as login session authentication, security, and language preferences. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how pages are used — such as which pages are visited most frequently and page load times — to help us improve platform performance.
• Functional Cookies: Remembering your preferences such as username, language selection and display settings to provide a more personalised experience.
• Analytics Cookies: Used by sl88's internal analytics tools to understand usage patterns in aggregate and anonymised form for platform improvement purposes.

You can manage and delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the sl88 platform. For more information on managing cookies in your browser, please refer to your browser's help documentation.

7 Your Rights as an sl88 User

Under Malaysia's Personal Data Protection Act 2010 and sl88's own policies, you have the following rights regarding your personal data. sl88 is committed to facilitating the exercise of these rights without unnecessary obstacles:

8 Data Retention Period

Sl88 does not retain your personal data for longer than is necessary for the purposes stated in this Privacy Policy. Data retention periods vary according to the type of data and the applicable legal requirements:

• Active account data: Retained for the duration that your account remains active and in use on the sl88 platform.
• Financial transaction data: Retained for a minimum of 7 years after a transaction occurs, in line with Malaysia's tax and anti-money laundering legal requirements.
• KYC and identity verification data: Retained for a minimum of 5 years after account closure, in accordance with applicable regulatory requirements.
• Customer support communication records: Retained for 3 years for audit, training and dispute resolution purposes.
• Technical log data: Retained for 12 months before being automatically deleted or anonymised.
• Marketing data: Retained until you withdraw consent or close your sl88 account.

Once the designated retention period has expired, your data will be securely deleted or permanently anonymised using industry-standard data disposal procedures.

9 Child Privacy and Minor Protection

Sl88 is an online entertainment platform that open to individuals aged 18 and above only. sl88 does not intentionally collect, process, or store personal data from individuals under the age of 18.

All sl88 account applicants are required to confirm that they are 18 years of age or older at registration, and sl88's KYC process will verify a player's age through valid identification documents. Should sl88 discover that data from an underage individual has been inadvertently collected, that data will be deleted immediately and the account in question will be terminated.

Parents or guardians who have concerns about possible use of the sl88 platform by a minor in their care are encouraged to contact the sl88 support team immediately. sl88 also provides parental control tools and information on website blocking through internet service providers if needed.

10 Amendments to This Privacy Policy

Sl88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the services we offer. Any amendments made will be published on this page along with the updated effective date.

For material amendments — such as changes to how we use your data or your user rights — sl88 will notify you via your registered email or in-app notification at least 14 calendar days before those changes take effect. This gives you sufficient time to review and make decisions regarding your account.

Continued use of the sl88 platform after any changes take effect will be considered acceptance of the amended Privacy Policy terms. If you disagree with any changes, you have the right to close your sl88 account before those changes come into effect.

11 How to Contact Us Regarding Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or how sl88 manages your personal data, we strongly encourage you to contact us directly. The sl88 Data Protection team is ready to assist you:

• Live Chat: Available 24/7 directly in the sl88 app or at sl88.vin — the fastest way to get an immediate response.
• Dedicated Privacy Email: [email protected] — response within 3 working days for privacy and data protection enquiries.
• WhatsApp: Contact sl88 via the official number listed in the app for complaints requiring immediate action.

For formal complaints relating to data protection, please clearly state in your message subject that your complaint concerns privacy, so it can be directed straight to sl88's Data Protection Officer for priority action. sl88 is committed to responding to all privacy-related enquiries within a reasonable timeframe, in a transparent and accountable manner.