Privacy Policy GTR Slot – Malaysian User Data Protection

GTR Slot collects personal data from users through several means — primarily during the account registration process, platform usage and financial transactions. Below are the categories of data we collect along with their specific purposes:

Registration & Identity Data

• Full name as it appears on your Malaysian MyKad — used for identity verification and the KYC process.
• MyKad number — required to verify member identity in accordance with anti-money laundering (AML) requirements.
• Date of birth — to verify that the user is at least 18 years of age.
• Active Malaysian phone number — used for OTP verification, important account communications and customer support.
• Email address — for delivering account statements, transaction notifications, and other account-related communications.
• Account password — stored in encrypted (hashed) form that is unreadable by any GTR Slot staff.

Transaction & Financial Data

• Records of all deposits and withdrawals — including the amount, date, time, and payment method used (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, or FPX).
• Payment account identifier such as the e-wallet account number used — gtr slot does not store your e-wallet PIN, password or security credentials.
• Bonus and promotion history that have been claimed — for the purpose of promotional terms compliance and bonus abuse prevention.

Game Activity Data

• Game history including slot titles played, bets placed, and winnings received.
• Gaming session times and duration — used for Responsible Gaming purposes and to detect concerning patterns of play.
• Deposit limits and self-controls set by the user themselves.

Technical & Device Data

• IP address — used for account security, fraud detection, and compliance with applicable jurisdictional restrictions.
• Device type and browser — to optimise the platform experience across multiple devices, including Malaysian smartphones.
• Cookie and session data — to maintain login status and deliver a personalised experience.

All data collected by GTR Slot is used exclusively for the purposes stated below. GTR Slot does not use user data for any purpose unrelated to the provision of online casino services and platform security:

• Account Management: Creating and managing your GTR Slot account, processing registrations, verifying identity and maintaining account integrity.
• Transaction Processing: Processes deposits via Malaysian e-wallets (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX) and securely handles winnings withdrawals with accuracy.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, duplicate accounts, and any other misuse of the platform.
• Customer Support: Provides effective, personalised support whenever you reach out to the GTR Slot support team via live chat, WhatsApp, or email.
• Responsible Gaming: Monitors gameplay patterns to identify signs of problem gambling and proactively provides appropriate intervention when needed.
• Legal Compliance: Fulfilling reporting obligations to the relevant Malaysian authorities, including reporting suspicious transactions to Bank Negara Malaysia in accordance with AML requirements.
• Platform Enhancements: Analysing usage data in aggregate (not individual) form to understand how users interact with the platform for the purpose of improving the user experience.
• Account-Related Communications: Sends important notifications about your account, changes to terms, promotions you are eligible for, and relevant security information.

GTR Slot does not sell, rent, or trade your personal data to any third party. However, in the course of operating the platform safely and lawfully, there are limited situations where data may be shared with carefully selected third parties:

All third parties that receive GTR Slot user data are bound by data processing agreements requiring them to protect that data to a standard equal to or higher than that practised by GTR Slot. They are not permitted to use GTR Slot user data for any purpose beyond what is contractually specified.

GTR Slot continuously invests in security infrastructure to ensure user personal data is protected to the highest standard. The key security measures we have in place are:

• 256-bit SSL Encryption: All communication between your browser and GTR Slot's servers is encrypted using TLS 1.3 with 256-bit keys — rendering your data completely unreadable even if intercepted.
• Data-at-Rest Encryption: Sensitive data stored in the gtr slot database — including identification card numbers and payment details — is kept in encrypted format, not plain text.
• Two-Factor Authentication (2FA): GTR Slot encourages users to enable two-factor authentication via OTP to their registered Malaysian mobile number for an additional layer of security during login.
• 24/7 Security Monitoring: An automated threat detection system continuously monitors the GTR Slot platform for suspicious activity, including unauthorised login attempts and unusual transaction patterns.
• Data Segregation: User data is stored in an isolated server environment with strict access controls — only authorised personnel who require access for specific tasks are permitted to access user data.
• Regular Security Audits: GTR Slot undergoes independent cybersecurity audits on a regular basis to identify and address any potential vulnerabilities in our systems.

GTR Slot uses cookies and similar tracking technologies to enhance your experience on the platform, maintain your login session, and understand how users interact with our platform. The following are the categories of cookies we use:

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect your ability to log in or use certain features on the GTR Slot platform. For instructions on managing cookies in major browsers, please refer to your browser's documentation.

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights regarding your personal data held by GTR Slot. To exercise any of these rights, contact us by email at support@gtrslot.best with the subject line "PRIVACY RIGHTS REQUEST":

GTR Slot retains users' personal data only for as long as necessary for the purposes outlined in this Privacy Policy, or as required by applicable Malaysian law:

• Active account data: Retained for the duration your account is active and for a minimum of 7 years following account closure, in accordance with Malaysia's anti-money laundering legal requirements.
• Financial transaction records: Retained for a minimum of 7 years from the date of transaction in accordance with Malaysian financial reporting and AML requirements.
• Game history: Retained for 2 years for customer support, dispute resolution and Responsible Gaming purposes, after which it is anonymised.
• Customer support communication data: Retained for 2 years from the date of last interaction.
• Technical log data: Retained for 90 days for security and technical troubleshooting purposes.
• Data of users who have self-excluded: Retained for the duration of the self-exclusion period plus 2 years to prevent accidental re-registration.

GTR Slot sends marketing communications only to members who have given their consent to receive them. Our marketing communications policy is as follows:

• Explicit Consent: You may opt in or out of marketing communications during account registration, or at any time through your account settings.
• Communication Type: GTR Slot marketing communications include new promotion alerts, personalised bonus offers, major jackpot notifications, and relevant new game information.
• Communication Channel: Email, in-app notifications and WhatsApp — limited to the channels you consented to during registration or have configured in your account settings.
• Unsubscribe: Every marketing email contains a clear unsubscribe link. Click the link to stop receiving marketing emails. Unsubscribe requests are processed within 48 hours.
• Mandatory Communications: Even if you opt out of marketing, GTR Slot may still send essential account-related communications such as security notifications, changes to terms, and transaction statements. These are not marketing messages and cannot be disabled.
• Self-Excluded Members: Users who have opted for self-exclusion from gambling will not receive any marketing communications from GTR Slot — this is an absolute policy with no exceptions.

Gtr slot reserves the right to amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements in Malaysia, or changes in how we handle user data. The amendment notification procedure is as follows:

• Material amendments — those that significantly change how we collect, use or share user data — will be communicated to members via email or in-platform notification at least 14 days before taking effect.
• Minor amendments that are clarificatory in nature or correct typographical errors do not require advance notice, but the updated date will be revised accordingly.
• The effective date of the latest version of the Privacy Policy is always clearly displayed at the top of this page.
• Continued use of the GTR Slot platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.
• If you disagree with any amendments made, you have the right to close your account and request data deletion in accordance with the procedures outlined in the User Rights section.

GTR Slot encourages all users to review this Privacy Policy periodically. The latest version is always available on this page and can be requested in alternative formats through our customer support.

If you have any questions, concerns or requests regarding this Privacy Policy or the way GTR Slot handles your personal data, please reach out to us through the following channels:

• Privacy Email: support@gtrslot.best (use the subject line "PRIVACY INQUIRY" for faster processing)
• Live Chat: Available 24/7 within the GTR Slot platform — for urgent privacy enquiries
• WhatsApp: For non-urgent enquiries, a response within 2 hours during Malaysia office hours (9am–11pm)

GTR Slot is committed to handling all privacy-related inquiries seriously and within a reasonable timeframe. Data access or deletion requests will be processed within 21 days of receipt, in accordance with Malaysia's PDPA 2010.