jeslot Privacy Policy

1. Introduction

jeslot ("we", "us", "the Platform") is committed to protecting the privacy and security of personal data belonging to players, prospective players, and visitors to jeslot.win. This Privacy Policy describes in detail the categories of personal data we collect, the purposes for which we process that data, the legal basis for processing, and the rights available to data subjects.

This Privacy Policy applies to all personal data processed in connection with your use of the jeslot Platform, whether accessed via desktop browser, mobile browser, or any other device. It applies to all registered Players and to visitors who have not yet registered an Account.

By registering a jeslot Account or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside jeslot's Terms & Conditions and Responsible Gaming Policy.

2. Data Controller

For the purposes of this Privacy Policy, jeslot is the data controller in respect of personal data collected through the Platform. jeslot operates under an international gaming authority licence and is subject to the data protection requirements applicable under that licence.

Questions regarding this Privacy Policy or jeslot's data processing practices should be directed to: [email protected]

3. Personal Data We Collect

3.1 Registration Data

When you create a jeslot Account, we collect: your email address, chosen password (stored in hashed form — we never store plain text passwords), and confirmation of your date of birth (to verify the 21+ age requirement).

3.2 Identity Verification (KYC) Data

As required under jeslot's international gaming authority licence, prior to processing withdrawals we collect: a copy of a government-issued photo identification document (Malaysian MyKad, Passport, or equivalent), proof of residential address (utility bill, bank statement, or equivalent), and, where required, source of funds documentation. KYC documents are processed and stored in accordance with applicable regulatory requirements.

3.3 Financial Data

We collect transaction records including deposit amounts, deposit timestamps, withdrawal requests, withdrawal amounts, payment methods used (e.g., Touch n Go eWallet, Boost, DuitNow, FPX, USDT TRC20), and associated transaction reference numbers. We do not store full payment card numbers. For e-wallet transactions, we store only the account identifier (phone number or account ID) necessary to process the transaction.

3.4 Gaming Activity Data

We collect records of your gaming activity on the Platform, including: games played, bet amounts, game outcomes, session durations, and wagering history. This data is retained as required by our licensing obligations and is used for responsible gaming monitoring, fraud detection, dispute resolution, and regulatory reporting.

3.5 Technical & Device Data

When you access the jeslot Platform, we automatically collect: IP address, browser type and version, operating system, device type, screen resolution, session timestamps, pages visited, and referring URL. This data is collected via server logs and cookies (see Section 9).

3.6 Communications Data

If you contact jeslot customer support, we retain records of that communication, including email correspondence, live chat transcripts, and the nature of any queries or complaints raised.

4. How We Use Your Personal Data

jeslot uses the personal data it collects for the following purposes:

• Account operation: Creating and managing your jeslot Account, authenticating your identity at login, and providing access to Platform features.
• Transaction processing: Processing deposits and withdrawals via Touch n Go eWallet, Boost, DuitNow, FPX, and other supported payment methods.
• Identity verification (KYC): Verifying your age (21+) and identity as required by our international gaming authority licence before processing withdrawals.
• Legal and regulatory compliance: Meeting obligations under our gaming authority licence, including anti-money laundering (AML) monitoring, suspicious transaction reporting, and regulatory record-keeping.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, collusion, and unauthorised access to Accounts.
• Responsible gaming monitoring: Monitoring gaming patterns for indicators of problem gambling, applying self-imposed limits, and complying with responsible gaming obligations under our licence.
• Customer support: Responding to Account queries, processing complaints, and resolving disputes.
• Platform improvement: Analysing aggregated, anonymised usage data to improve Platform performance, game selection, and user experience.
• Marketing communications: Where you have given explicit consent, sending promotional communications about jeslot offers, new games, or bonuses. You may withdraw this consent at any time via your Account settings or by contacting support.

5. Legal Basis for Processing

jeslot processes personal data under the following legal bases:

• Contract performance: Processing necessary to perform the contract between jeslot and the Player (i.e., operating the Account, processing transactions, providing gaming services).
• Legal obligation: Processing required to comply with jeslot's obligations under its international gaming authority licence, AML regulations, and applicable law.
• Legitimate interests: Processing necessary for jeslot's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and platform improvement, where such interests are not overridden by the data subject's rights.
• Consent: Processing based on your explicit consent, such as marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

jeslot does not sell, rent, or trade personal data to third-party advertisers or data brokers. We share personal data only in the following circumstances:

• Payment processors: Transaction data is shared with payment service providers (e.g., Touch n Go eWallet, Boost, FPX network banks including Maybank and CIMB) to the extent necessary to process deposits and withdrawals.
• KYC and AML service providers: Identity verification data may be processed by third-party KYC or AML compliance service providers engaged by jeslot under contractual obligations requiring equivalent data protection standards.
• Game providers: When you play a game on the jeslot Platform, your player session data (anonymised player ID, bet amounts, game outcomes) may be transmitted to the relevant game provider's systems (e.g., Pragmatic Play, PG Soft, Spadegaming) for game engine processing. Game providers are contractually prohibited from using this data for any purpose other than game delivery.
• Regulatory authorities: jeslot may be required to disclose personal data to its licensing authority, financial intelligence units, or law enforcement agencies in response to lawful requests or as required under AML/CTF reporting obligations.
• Business transfers: In the event of a merger, acquisition, or sale of jeslot assets, personal data may be transferred as part of that transaction, subject to equivalent privacy protections.

7. International Data Transfers

As jeslot operates under an international gaming authority licence and uses global technology service providers, your personal data may be processed in countries outside Malaysia. Where personal data is transferred outside Malaysia, jeslot ensures that appropriate safeguards are in place, which may include standard contractual clauses, data processing agreements, or reliance on adequacy determinations applicable under jeslot's licensing regime.

8. Data Retention

jeslot retains personal data for the following periods, unless a longer retention period is required by law or licensing obligation:

• Account and KYC data: Retained for the duration of the Account and for a minimum of 5 years following Account closure, in compliance with AML record-keeping requirements under jeslot's gaming authority licence.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Gaming activity records: Retained for a minimum of 3 years from the date of each gaming session.
• Customer support communications: Retained for 2 years from the date of the communication, or longer where the communication relates to an active dispute or legal matter.
• Technical and device data: Server logs retained for up to 12 months; anonymised aggregated analytics data may be retained indefinitely.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

9. Cookies & Tracking Technologies

jeslot uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Session management cookies that are essential for the Platform to function. These include authentication tokens that keep you logged in to your jeslot Account during a session. These cookies cannot be disabled.
• Functional cookies: Cookies that remember your preferences, such as language settings, lobby filters, and game history. These improve your experience on the Platform.
• Analytics cookies: Anonymised usage analytics to help jeslot understand how Players use the Platform, which pages receive most traffic, and where user experience issues occur. This data is processed in aggregate and does not identify individual Players.
• Security cookies: Cookies that help jeslot detect and prevent fraudulent activity, multi-accounting, and other security threats.

You may configure your browser to block or delete cookies, but doing so may impair the functionality of the jeslot Platform, including your ability to maintain an active login session.

10. Your Data Rights

Subject to applicable law and our legal retention obligations, you have the following rights in respect of your personal data held by jeslot:

• Right of access: You may request a copy of the personal data jeslot holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations (particularly AML record-keeping requirements, which take precedence).
• Right to restrict processing: You may request that jeslot restrict processing of your data in certain circumstances, such as while a rectification request is being assessed.
• Right to data portability: Where processing is based on your consent or contract performance, you may request a copy of your data in a structured, machine-readable format.
• Right to object: You may object to processing based on jeslot's legitimate interests. You may withdraw consent to marketing communications at any time.

To exercise any of these rights, contact jeslot at [email protected]. Requests will be acknowledged within 5 business days and addressed within 30 days, subject to identity verification and the complexity of the request.

11. Security

jeslot implements technical and organisational security measures appropriate to the nature of the personal data processed, including:

• 256-bit SSL/TLS encryption for all data in transit between your device and jeslot servers.
• AES-256 encryption for personal data stored at rest on jeslot infrastructure.
• Bcrypt hashing for all stored passwords — jeslot never stores your password in recoverable form.
• Access controls limiting employee access to personal data to those with a legitimate operational need.
• Multi-factor authentication for internal administrative access to systems containing personal data.
• Intrusion detection systems and regular security assessments of Platform infrastructure.

No security system is completely impenetrable. In the event of a personal data breach that poses a risk to your rights and freedoms, jeslot will notify affected Players and the relevant regulatory authority within the timeframes required under applicable law.

12. Third-Party Links

The jeslot Platform does not contain links to third-party websites. Where jeslot's game lobby includes games provided by third-party game studios, those games are embedded within the jeslot Platform and are governed by jeslot's data sharing terms with the relevant game provider (see Section 6). jeslot is not responsible for the privacy practices of independent third-party websites.

13. Children and Minors

jeslot does not knowingly collect personal data from individuals under 21 years of age. The Platform is strictly for adults aged 21 and above. If jeslot becomes aware that personal data has been collected from a person under 21, that data will be deleted and the associated Account closed immediately. If you have reason to believe a person under 21 has registered a jeslot Account, please notify us at [email protected] immediately.

14. Amendments to This Policy

jeslot may update this Privacy Policy from time to time. Where changes are material, we will provide reasonable advance notice to registered Players via the email address on their Account or via a prominent notice on the Platform. The "Last updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the jeslot Platform following the effective date of any revision constitutes acceptance of the updated Privacy Policy.

15. Contact

For any questions, concerns, or requests relating to this Privacy Policy or jeslot's data processing practices, please contact: