Privacy Policy

This Privacy Policy ("Policy") describes how PitaSlot ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects the personal data of individuals ("you", "Player", "User") who access or use the website located at pitaslot.cam and any associated services, products, or applications provided by PitaSlot.

PitaSlot operates an online casino and sports betting platform designed primarily for Malaysian players. All financial transactions on the Platform are denominated in Malaysian Ringgit (MYR). We process personal data in connection with player registration, Know Your Customer (KYC) verification, payment processing through channels including Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank, customer support, responsible gambling monitoring, and platform improvement.

By registering a PitaSlot account, accessing the Platform, or otherwise engaging with our services, you acknowledge that you have read, understood, and agree to the data practices described in this Policy. If you do not agree with these practices, you must not use the Platform.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, device identifiers, and behavioural data.
• "Data Controller" — PitaSlot, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — any third party that processes personal data on behalf of PitaSlot, subject to written contractual obligations.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, and deletion.
• "KYC" — Know Your Customer; the identity and document verification process required for withdrawal eligibility and compliance purposes.
• "Cookies" — small text files placed on your device by the Platform to facilitate functionality, analytics, and user preferences.
• "Consent" — a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.

PitaSlot collects the following categories of personal data in the course of providing our services:

We do not collect sensitive personal data (such as racial or ethnic origin, health data, or religious beliefs) except where strictly required for responsible gambling assessments and only with your explicit consent or where permitted by applicable law.

PitaSlot collects personal data through the following means:

4.1 Directly from You

The majority of the personal data we hold is provided directly by you during account registration, KYC submission, payment processing, completion of responsible gambling assessments, live chat interactions, and email communications with our support team.

4.2 Automated Technical Collection

When you access the Platform, we automatically collect certain technical and usage data through cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, device fingerprint, browser configuration, and session activity. This data is collected to maintain platform security, detect fraudulent access, and improve user experience.

4.3 Third-Party Sources

In certain circumstances, we may receive personal data from third-party sources, including: payment processors (to verify transaction status and prevent fraud), identity verification service providers (to assist with KYC processing), and fraud intelligence databases (to identify high-risk account activity). All third-party data sources used by PitaSlot are contractually bound to handle data in accordance with applicable privacy standards.

PitaSlot processes your personal data only for specified, explicit, and legitimate purposes. The primary legal bases on which we rely are contractual necessity, legal obligation, legitimate interests, and (where applicable) your consent.

• Account Registration & Service Delivery: Processing is necessary to perform the contract between you and PitaSlot — to create and manage your account, process deposits and withdrawals in MYR, provide access to games and sports betting markets, and deliver customer support in English, Bahasa Melayu, and Mandarin.
• KYC & Identity Verification: Processing is necessary to comply with our legal and regulatory obligations under applicable licensing requirements, including age verification (21+) and anti-money-laundering controls.
• Fraud Prevention & Security: Processing is based on our legitimate interest in protecting the integrity of the Platform, preventing unauthorised access, and safeguarding player funds.
• Responsible Gambling Monitoring: Processing is based on both legal obligation and legitimate interest in fulfilling our duty of care towards players who may exhibit indicators of problem gambling behaviour.
• Platform Analytics & Improvement: Processing is based on our legitimate interest in understanding how the Platform is used in order to improve performance, reliability, and user experience.
• Marketing Communications: Where you have provided explicit consent, we may process your contact details to send you promotional communications about bonuses, new games, and special events. You may withdraw consent at any time.

PitaSlot does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly as necessary:

• Payment Service Providers: Including operators of Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, and direct banking partners (Maybank, CIMB, Public Bank, Hong Leong), as required to process deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and document verification services engaged to assist with identity authentication and age verification processing.
• IT Infrastructure and Hosting Providers: Cloud hosting, content delivery, and cybersecurity service providers who process data on our behalf under strict data processing agreements.
• Customer Support Platforms: Live chat and ticketing system providers used to facilitate 24/7 player support communications.
• Analytics Providers: Aggregated, anonymised platform usage data may be processed by analytics service providers to assist with platform performance monitoring.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or lawful authority, PitaSlot may disclose personal data to competent regulatory or law enforcement bodies.

PitaSlot uses cookies and similar technologies to operate and improve the Platform. The types of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies enable login sessions, maintain security tokens, and allow core functionality to operate. They cannot be disabled without impairing your ability to use the Platform.
• Performance & Analytics Cookies: Collect aggregated, anonymised information about how visitors use the Platform — for example, which pages are visited most frequently and whether users encounter error messages. This data helps us improve platform performance.
• Functional Cookies: Remember your preferences such as language selection (English / Bahasa Melayu / Mandarin) and display settings to provide a more personalised experience on return visits.
• Session Integrity Cookies: Used to detect and prevent fraudulent account access by associating authenticated sessions with verified device profiles.

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some features on the Platform. PitaSlot does not use cookies for targeted third-party advertising.

PitaSlot retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or operational obligations.

• Active Account Data: Retained for the duration of the account and for a minimum period of five (5) years following account closure, in compliance with applicable anti-money-laundering and gaming licensing requirements.
• KYC Documentation: Identity documents and verification records are retained for a minimum of five (5) years following account closure or the conclusion of the business relationship.
• Financial Transaction Records: Transaction histories are retained for a minimum of seven (7) years for audit, dispute resolution, and regulatory compliance purposes.
• Customer Support Correspondence: Live chat transcripts and email records are retained for a period of three (3) years following the resolution of the relevant support interaction.
• Technical and Usage Data: Anonymised or aggregated usage data may be retained indefinitely for platform analytics purposes. Identifiable technical data (such as IP address logs) is retained for a maximum of twelve (12) months.

Following expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our data disposal procedures.

PitaSlot implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit TLS/SSL encryption for all data transmitted between your device and the PitaSlot platform;
• Encryption of sensitive data at rest, including identity documents and payment account details;
• Role-based access controls ensuring that only authorised personnel may access identifiable personal data, on a strict need-to-know basis;
• Multi-factor authentication requirements for administrative access to production systems;
• Regular security assessments, penetration testing, and vulnerability scanning conducted by qualified security professionals;
• Incident response procedures designed to detect, contain, and notify affected parties of any data breach within applicable regulatory timeframes.

Whilst PitaSlot takes all reasonable precautions to protect your data, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

As an internationally licensed online gaming platform, PitaSlot may transfer your personal data to countries outside Malaysia for the purposes of hosting, processing, or service delivery. Where such transfers occur, we take appropriate steps to ensure that your personal data receives an adequate level of protection.

Transfers to third-party data processors located outside Malaysia are governed by contractual safeguards, including standard data protection clauses, which require recipient processors to handle your data in a manner consistent with the protections described in this Policy.

Subject to applicable law and any overriding legal obligations, you have the following rights in respect of your personal data held by PitaSlot:

To exercise any of the above rights, please contact our support team via 24/7 live chat or by email at [email protected] (plain text — not a clickable link). We will respond to verifiable requests within five (5) business days. Identity verification may be required before we action your request to protect against unauthorised data access.

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

PitaSlot is strictly an adult platform. Our services are not directed at, and are not intended for use by, any individual under the age of 21 years. We do not knowingly collect personal data from minors.

Age verification is a mandatory component of our KYC process. All registered Players are required to provide documentary evidence confirming they are aged 21 or above before withdrawal functionality is activated on their account.

If we become aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the associated account, void any transactions or winnings, return any verified deposits to the payment source where possible, and permanently delete the personal data collected. If you believe a minor has registered an account on PitaSlot, please contact us immediately at [email protected].

The PitaSlot platform may contain references to or integrations with third-party services, including payment processors, identity verification providers, and responsible gambling resources. This Privacy Policy applies solely to data processed by PitaSlot and does not extend to the data practices of any third party, including third-party payment platforms such as Touch 'n Go eWallet, Boost, or GrabPay.

We encourage you to review the privacy policies of any third-party service you interact with through or in connection with the PitaSlot platform. PitaSlot accepts no responsibility or liability for the data practices of third-party services.

PitaSlot reserves the right to update or amend this Privacy Policy at any time. Any material changes to how we collect, use, or share your personal data will be communicated to registered Players via email to the address on file, or through a prominent notice displayed on the Platform, at least seven (7) days before the amended Policy takes effect.

Minor amendments — such as clarifications, corrections, or changes that do not materially affect your rights or how your data is processed — may take effect immediately upon publication on the Platform.

Your continued use of PitaSlot after the effective date of any revised Policy constitutes your acknowledgement and acceptance of the updated terms. If you do not accept a material change to this Policy, you must close your account and cease using the Platform.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way PitaSlot handles your personal data, please contact us through any of the following channels:

• 24/7 Live Chat: Available directly on the PitaSlot platform. Average response time: 3–5 minutes. Our agents are available in English, Bahasa Melayu, and Mandarin.
• Email (plain text — not a clickable link): [email protected]

When submitting a data-related request, please include your registered username or email address and a clear description of your query or the right you wish to exercise. This helps us to process your request efficiently. We will respond to all data subject requests within five (5) business days.