Sloki88 Privacy Policy

This Privacy Policy ("Policy") is published by Sloki88 ("we", "us", "our", "the Company"), the operator of the gaming platform accessible at sloki88.cam and any associated subdomains or mobile applications (collectively, the "Platform"). This Policy applies to all persons who access, register on, or interact with the Platform in any capacity ("Users", "you").

Sloki88 is committed to protecting the privacy and personal data of all Users. This Policy sets out in clear terms the categories of personal data we collect, the purposes for which we process it, the legal bases on which processing is carried out, how long we retain data, with whom we may share it, and the rights available to you in relation to your personal data.

This Policy should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and Sloki88. Where this Policy and the Terms & Conditions conflict on matters of data protection, this Policy shall prevail.

The following terms carry specific meanings throughout this Policy:

• "Personal Data" — any information that, alone or in combination with other information, identifies or is capable of identifying a natural person.
• "Processing" — any operation performed on personal data, including collection, recording, storage, organisation, retrieval, use, disclosure, transfer, or deletion.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For this Platform, the Data Controller is Sloki88.
• "Data Processor" — a third party that processes personal data on behalf of the Data Controller under a data processing agreement.
• "KYC" — Know Your Customer; the identity verification process required for compliance purposes.
• "Platform" — the Sloki88 website at sloki88.cam, associated subdomains, and mobile applications.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement by a User to the processing of their personal data for a stated purpose.

The categories of personal data that Sloki88 collects and processes are set out in the table below. We only collect data that is necessary and proportionate to the purposes described in Clause 5.

Sloki88 collects personal data through the following channels:

• Direct provision by you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or otherwise voluntarily provide information to us.
• Automated collection: When you use the Platform, we automatically collect technical and behavioural data including your IP address, device type, browser type and version, operating system, session duration, pages visited, and in-game activity. This is collected via server logs, cookies, and similar tracking technologies.
• Third-party payment processors: When you deposit or withdraw funds via Malaysian payment channels (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank) or cryptocurrency networks, our payment processors may share transaction confirmation data with us.
• Identity verification services: When you submit KYC documents, our authorised KYC processing partners verify the authenticity of the documents submitted and return a verification result to us.
• Fraud prevention and AML partners: We may receive risk-scoring or flagging information from third-party fraud detection and anti-money laundering screening services as part of our compliance obligations.

Sloki88 processes personal data for the following specific and documented purposes:

• Account creation and management: Creating, maintaining, and administering your registered account on the Platform.
• Identity verification and KYC compliance: Verifying your identity and age (minimum 21 years) in accordance with our licensing obligations and anti-money laundering requirements.
• Transaction processing: Processing deposits and withdrawals in MYR and other currencies via Malaysian payment channels and cryptocurrency networks.
• Service delivery: Providing access to sports betting markets, casino games, live dealer tables, promotional offers, and all other services on the Platform.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, collusion, multi-accounting, and other prohibited conduct.
• Customer support: Responding to your queries, resolving disputes, and providing technical assistance via live chat, email, or other support channels.
• Responsible gambling: Monitoring betting patterns to identify potentially problematic gambling behaviour and offering appropriate interventions or self-help tools.
• Legal and regulatory compliance: Fulfilling obligations imposed by our gaming licence, applicable anti-money laundering laws, and orders from competent authorities.
• Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, user experience, and payment processing.
• Marketing communications: Sending promotional offers, bonus notifications, and news about the Platform, where you have opted in to receive such communications or where legitimate interest applies.

Sloki88 processes personal data on the following legal bases in accordance with internationally recognised data protection principles:

• Contractual necessity: Processing required to perform our contractual obligations to you under the Terms & Conditions, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with KYC obligations, anti-money laundering regulations, and orders from competent authorities imposed by our licensing framework.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and aggregated analytics, where these interests are not overridden by your rights and freedoms.
• Consent: Processing for direct marketing communications and non-essential analytics cookies, where you have provided explicit opt-in consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Sloki88 does not sell, rent, or trade your personal data to any third party for their independent commercial use. We may share your personal data with the following categories of recipients only to the extent necessary and proportionate to the purposes described in Clause 5:

Service Providers and Data Processors

Carefully selected third-party vendors who provide services to Sloki88 under contractual data processing agreements, including: payment processing platforms, KYC and identity verification services, fraud detection and AML screening providers, cloud hosting and data storage providers, customer support software vendors, and analytics service providers. All such vendors are prohibited from using your data for their own purposes.

Licensing and Regulatory Authorities

Sloki88 may be required to disclose personal data to the authority under whose jurisdiction our gaming licence is issued, or to other regulatory bodies, in fulfilment of our compliance obligations. Such disclosures are made only to the extent mandated by law.

Law Enforcement

Where required by a valid court order, warrant, or other lawful authority, Sloki88 may disclose personal data to law enforcement or government agencies. We will, where legally permissible, seek to notify you of such requests.

Corporate Restructuring

In the event of a merger, acquisition, or sale of all or substantially all of the assets of Sloki88, personal data held by us may be transferred to the acquiring entity, subject to the same privacy protections as set out in this Policy.

As an internationally operating platform, Sloki88 and certain of its service providers may process personal data in jurisdictions outside of Malaysia. Where personal data is transferred internationally, Sloki88 ensures that appropriate safeguards are in place to protect the data, including contractual protections with data processors and hosting arrangements in jurisdictions with recognised data protection standards.

By using the Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions that may have different data protection laws from those applicable in Malaysia. Sloki88 takes reasonable steps to ensure that all international data transfers are conducted securely and that recipient parties maintain adequate protection standards.

Sloki88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by our licensing obligations or applicable law. General retention guidelines are as follows:

• Account and identity data: Retained for the duration of your active account and for a minimum of 5 years following account closure, in accordance with anti-money laundering record-keeping obligations.
• Financial and transaction records: Retained for a minimum of 5 years from the date of the transaction to satisfy AML and financial reporting requirements.
• KYC documents: Retained for a minimum of 5 years following the completion of KYC verification or account closure, whichever is later.
• Customer support records: Retained for 3 years from the date of the interaction, or until the relevant matter is fully resolved.
• Marketing consent records: Retained for as long as your marketing opt-in is active and for 2 years after you withdraw consent, for audit purposes.
• Cookie and analytics data: Session cookies expire at the end of your browsing session. Analytics data is retained in aggregated form only, typically for 12–24 months.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with industry-standard data disposal practices.

Sloki88 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit the Platform. The categories of cookies we use are as follows:

• Strictly necessary cookies: Required for the Platform to function correctly. These include session authentication cookies and security tokens. They cannot be disabled without impacting Platform functionality.
• Functional cookies: Enable personalisation features such as remembering your language preference, display settings, and login state between sessions.
• Analytics cookies: Collect anonymised information about how Users interact with the Platform — pages visited, time spent, navigation paths — to help us improve user experience. Used only with your consent.
• Performance cookies: Monitor Platform load times and identify technical errors to maintain optimal platform performance.

You may manage your cookie preferences at any time through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. Sloki88 does not use third-party advertising or behavioural tracking cookies.

Sloki88 implements technical and organisational security measures appropriate to the sensitivity of the personal data processed. These measures include, but are not limited to:

• 256-bit Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and our servers;
• Encryption at rest for stored personal data and KYC documents;
• Role-based access controls limiting employee access to personal data to those with a documented operational need;
• Multi-factor authentication for administrative system access;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Comprehensive audit logging of all access to personal data stores;
• Staff training on data protection obligations and security practices.

Despite these measures, no system connected to the internet can be guaranteed to be completely secure. In the event of a personal data breach that poses a risk to your rights and freedoms, Sloki88 will notify affected Users without undue delay after becoming aware of the breach, in accordance with its notification obligations.

As a User of the Sloki88 Platform, you hold the following rights in respect of your personal data. To exercise any of these rights, contact our support team in writing at the address provided in Clause 15. We will respond within 30 days of receiving a valid request.

Sloki88 will not discriminate against you for exercising any of the above rights. Note that certain rights are subject to limitations where legal obligations require us to retain or continue processing personal data — for example, AML record-keeping obligations may prevent immediate erasure of financial transaction records.

The Platform is strictly intended for individuals aged 21 years and above. Sloki88 does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from a person under 21 without verifiable parental or guardian consent, we will take prompt steps to delete that data and close the associated account.

Age verification is a mandatory step in the KYC process. Any account where the registered User is found to be below the age of 21 will be immediately suspended and all balances held pending investigation and, where applicable, returned to the funding source after identity confirmation.

If you are a parent or guardian and believe that a minor in your care has registered an account on sloki88.cam, please contact our support team immediately so that we may take appropriate action.

Sloki88 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, our processing activities, or industry best practice. The revised Policy will be published on the Platform with an updated "Last Updated" date.

Where changes are material — for example, where we introduce a new category of data processing or a new purpose — we will provide registered Users with at least 14 days' advance notice via the email address on file before the changes take effect.

Your continued use of the Platform after the effective date of any amended Policy constitutes your acknowledgement of, and agreement to, the changes. If you do not agree to the amended Policy, you must cease using the Platform and contact us to close your account.

For any questions, concerns, or requests relating to this Privacy Policy or the exercise of your privacy rights, please contact the Sloki88 data protection team using the details below. All data-related requests should be submitted in writing to ensure an accurate and complete response can be prepared.

Sloki88 is committed to resolving all privacy-related concerns fairly and promptly. If you are not satisfied with our response to your privacy request, you may escalate the matter to the relevant supervisory authority applicable under the licensing jurisdiction in which Sloki88 operates.