SL999 Privacy Policy

SL999 ("we", "us", "our", "the Company") is committed to protecting the personal data of every individual who visits, registers on, or interacts with our platform at https://sl999.lat (the "Platform"). This Privacy Policy describes what personal information we collect, the purposes for which we use it, how long we retain it, the parties we may share it with, and the rights available to you in relation to your data.

This Policy applies to all visitors to the Platform, all registered Account holders, and individuals who contact SL999 through any available support channel. It applies to data collected through the website and any related interface, including mobile-optimised versions.

SL999 operates as an English-language online gaming platform principally serving adult players in Malaysia, including those located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other regions throughout the country. All financial transactions are conducted in Malaysian Ringgit (MYR / RM) unless otherwise stated.

The following terms carry the meanings below throughout this Privacy Policy.

3.1 Information You Provide Directly

When you register an Account or interact with SL999, we may collect the following categories of information:

• Full legal name and date of birth as recorded on official identification documents.
• Valid email address and Malaysian contact telephone number.
• Residential address, including postcode and state within Malaysia.
• Username and encrypted Account credentials.
• Copies of government-issued identification (for example, MyKad or passport) submitted for KYC verification.
• Payment method details including bank account numbers, eWallet identifiers, or payment references associated with Maybank, CIMB, Public Bank, Hong Leong, Touch'n Go eWallet, Boost, GrabPay, DuitNow, and FPX transactions — processed through secure payment channels, not stored as raw card numbers.
• Communications submitted through support channels, including descriptions of account queries, dispute details, and any attachments voluntarily provided.
• Responses to surveys, feedback requests, or promotional claims.

3.2 Information Collected Automatically

When you access the Platform, certain technical information is collected automatically by our servers and analytics systems:

• IP address and approximate geographic location (city or region level).
• Device type, operating system, browser version, and screen resolution.
• Pages visited, features used, links clicked, session duration, and navigation path through the Platform.
• Date, time, and frequency of visits and login events.
• Game activity, wager history, and transaction records associated with your Account.
• Cookie identifiers and similar tracking data — described further in Section 7.

3.3 Information from Third Parties

SL999 may receive supplementary information from third parties including payment processors, identity verification providers, fraud prevention services, and responsible gambling databases, where this is necessary to comply with legal obligations or to protect the integrity of the Platform.

SL999 uses Personal Data only for specific, documented purposes. The table below summarises the primary processing activities.

SL999 does not use Personal Data to make solely automated decisions that produce significant legal effects on individuals without human review where such decisions are material to your Account.

SL999 processes Personal Data only where a recognised legal basis applies. The primary bases relied upon are:

• Contract performance: Processing is necessary to open, administer, and support your Account and to fulfil transaction-related obligations.
• Legal obligation: Processing is required to comply with applicable laws, including identity verification rules, anti-money laundering requirements, and responsible gambling obligations.
• Legitimate interest: Processing is necessary for purposes such as fraud prevention, information security, service improvement, and internal analytics, provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on consent — for example, receiving marketing communications — you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

SL999 does not sell, rent, or trade Personal Data to third parties for their own marketing purposes. Data is shared only in the circumstances described below.

6.1 Service Providers (Processors)

SL999 engages third-party processors to support Platform operations. These include payment processing providers, identity verification and KYC services, cloud hosting and infrastructure providers, security and fraud detection systems, and customer support tooling. All processors are bound by appropriate data processing agreements and are not permitted to use your data for their own independent purposes.

6.2 Payment Partners

Relevant payment information is shared with Malaysian financial institutions and payment service providers — including those facilitating DuitNow, FPX, eWallet transactions, and direct bank transfers through Maybank, CIMB, Public Bank, and Hong Leong — solely to the extent required to authorise, process, and reconcile transactions on your Account.

6.3 Regulatory and Legal Disclosure

SL999 may disclose Personal Data to regulatory bodies, law enforcement agencies, courts, or other competent authorities where disclosure is required or permitted by applicable law, to respond to a legal process, or to prevent, investigate, or prosecute fraud, money laundering, or other unlawful conduct.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or transfer of SL999's assets, Personal Data held by SL999 may be transferred to the successor entity as part of that transaction. Users will be notified of any material change to the identity of the data controller.

SL999 uses cookies and similar technologies — including session tokens and local storage — to operate the Platform, maintain logged-in sessions, remember preferences, analyse usage patterns, and support Platform security. Cookies do not contain your password or payment credentials.

7.1 Categories of Cookies Used

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, security identifiers, and load-balancing cookies. They cannot be disabled without affecting Platform access.
• Functional cookies: Store preferences such as display language, remembered login state, and session continuity settings to improve your experience across visits.
• Analytics cookies: Collect aggregated, anonymised data about how visitors navigate the Platform — pages visited, features used, session duration — to help improve performance and content organisation.
• Security and fraud-detection cookies: Help identify unusual activity patterns, multiple Account attempts, and bot-driven behaviour to protect the Platform and its users.

7.2 Managing Cookies

Most browsers allow you to view, control, and delete cookies through browser settings. Disabling strictly necessary cookies will impair your ability to log in or use core Platform features. Disabling functional or analytics cookies will not prevent Platform access but may affect your experience. Instructions for managing cookies can be found in your browser's help documentation.

SL999 retains Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law or regulation.

• Account and transaction records: Retained for a minimum of five years following Account closure or the last transaction, to support legal, regulatory, and audit obligations.
• KYC and identity documents: Retained for a minimum of five years after the end of the business relationship, in accordance with anti-money laundering requirements.
• Support communications: Retained for up to three years after the query is resolved, unless a live dispute, legal claim, or regulatory matter requires longer retention.
• Responsible gambling records: Self-exclusion records and related communications are retained throughout the exclusion period and for a minimum of three years thereafter.
• Marketing preferences: Retained until consent is withdrawn. Opt-out records are retained indefinitely to prevent accidental re-subscription.
• Session and analytics data: Aggregated or anonymised after 18 months; identifiable session logs may be retained for up to 12 months for security purposes.

When data is no longer required and no legal obligation necessitates retention, it is securely deleted or anonymised so that it can no longer be associated with a particular individual.

SL999 implements technical, organisational, and procedural controls designed to protect Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key measures include:

• Encryption of data in transit using current TLS protocols for all communication between your device and the Platform.
• Encryption of sensitive data at rest, including payment-related identifiers and Account credentials stored on our servers.
• Password hashing using industry-standard one-way algorithms so that plaintext passwords are never stored.
• Access controls that restrict internal access to Personal Data on a need-to-know basis, with access logging and periodic review.
• Monitoring systems designed to detect anomalous activity, unauthorised access attempts, and potential data security incidents.
• Regular security assessments and updates to address identified vulnerabilities in the Platform infrastructure.

No security system is entirely infallible. Users are also responsible for keeping their own Account credentials confidential and for notifying SL999 immediately if they suspect their Account has been accessed without authorisation.

Subject to applicable law, you have the following rights in relation to Personal Data that SL999 holds about you. To exercise any of these rights, please contact our support team with sufficient detail to identify your Account and describe the right you wish to exercise.

SL999 will acknowledge a rights request promptly and aim to respond substantively within a reasonable period. Some requests may be subject to identity verification before they can be fulfilled, to prevent unauthorised access to another person's data. Certain rights may be limited where legal obligations require continued retention or processing of the relevant data.

SL999 is strictly for adults aged 21 and above. The Platform does not knowingly collect Personal Data from individuals under the age of 21, and it does not provide gaming services to minors.

Where SL999 has reason to believe that a person under 21 has registered or attempted to register an Account, access will be suspended immediately, any associated data will be reviewed and deleted where appropriate, and the matter will be handled in accordance with our responsible gambling procedures and applicable legal requirements.

Age verification may be required at any point during the Account lifecycle. Where verification cannot be satisfactorily completed, Account activity will be restricted pending resolution.

The SL999 Platform may include functionality provided by third-party technology partners such as game content providers, live dealer studios, payment gateways, identity verification engines, and analytics platforms. These parties process data under their own terms and, where applicable, under agreements with SL999 that govern how they handle Personal Data on our behalf.

SL999 does not control how third-party providers operate their own internal systems or how they handle data for their independent purposes. Where a User voluntarily engages with a service provided by a third party outside the SL999 Platform — for example, by navigating away from our website — the privacy practices of that third party apply independently of this Policy.

SL999 selects service providers that demonstrate appropriate data protection standards and does not knowingly engage processors that use Personal Data beyond what is strictly necessary for the contracted service.

SL999 may update this Privacy Policy from time to reflect changes in law, regulation, Platform functionality, processing activities, or data protection best practices. The date at the top of this document will be updated whenever a revision is made.

Where a change is material — for example, a significant new category of processing or a change in how we share data — SL999 may notify registered Users through Account messaging or email. In all cases, the most current version of the Policy will be published at https://sl999.lat/privacy-policy.

Continued use of the Platform after a revised Policy takes effect constitutes acceptance of the changes. Users who do not accept a material change should stop using the Platform and contact support to request Account closure.

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a concern about how your Personal Data has been handled, please contact the SL999 support team. Include your registered Account username, a clear description of your request or concern, and any relevant reference information to allow us to locate and review the relevant records.

The support email above is provided as plain text for reference. Please do not include passwords, full bank account numbers, or one-time security codes in any support message. SL999 may request specific verification details through a secure internal process where necessary to authenticate your identity before responding to a data rights request.