Privacy Policy

This Privacy Policy ("Policy") is issued by shopislot.cam ("shopislot", "we", "us", "our") and applies to all personal data collected from users ("you", "User", "Player") of the online casino and sports betting platform accessible at https://shopislot.cam and all associated pages and services.

shopislot is committed to protecting the privacy and personal data of all users. We collect only the data that is necessary to provide our Services, comply with our legal and regulatory obligations, and maintain the security and integrity of our platform. We do not sell, rent, or trade your personal data to third parties for commercial marketing purposes.

This Policy has been written in plain English to ensure that every user — including Malaysian players accessing our platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and elsewhere across Malaysia — can understand how their data is managed and what rights they hold.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — any information that identifies or could reasonably identify a natural person, directly or indirectly, including name, identification number, contact details, or online identifiers.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transmission, or deletion.
• "Data Controller" — shopislot.cam, which determines the purposes and means of processing your personal data.
• "Data Processor" — a third party that processes personal data on behalf of shopislot in accordance with our instructions and this Policy.
• "KYC Data" — identity verification documents and information collected as part of our Know Your Customer process, including government-issued identification and proof of address.
• "Cookies" — small text files stored on your device by your browser when you visit shopislot.cam, used to support platform functionality and analyse usage patterns.
• "Services" — all features, games, betting markets, and ancillary functions available on shopislot.cam.

shopislot collects personal data through several channels and for specific, documented purposes. The categories of data we collect are described below.

3.1 Data You Provide Directly

• Account Registration: Full legal name, date of birth, residential address, email address, and contact number provided when creating your shopislot account.
• KYC Verification Documents: Government-issued Malaysian identification (MyKad, passport, or driver's licence), proof of residential address (utility bill or bank statement dated within 3 months), and a selfie photograph holding the identification document.
• Payment Information: Details necessary to process deposits and withdrawals, including account holder name, payment method type (e.g., Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect), and associated account identifiers. shopislot does not store full card or banking credentials — these are processed via secure third-party payment gateways.
• Support Communications: The content of emails, live chat transcripts, and any other correspondence you initiate with our support team.
• Responsible Gambling Requests: Information provided when requesting deposit limits, self-exclusion, cooling-off periods, or other player protection measures.

3.2 Data Collected Automatically

• Device & Technical Data: IP address, browser type and version, operating system, device type, and screen resolution.
• Usage Data: Pages visited, game sessions played, betting history, session duration, click paths, and navigation patterns within the Platform.
• Geolocation Data: Country and approximate regional location derived from your IP address, used for access control and compliance purposes.
• Cookies & Tracking Data: See Section 7 (Cookies & Tracking) for full details.

3.3 Data from Third Parties

• Payment Processors: Transaction status and confirmation data provided by our Malaysian payment partners upon processing deposits and withdrawals.
• Fraud Prevention Services: Risk assessment signals provided by third-party fraud detection tools to protect the integrity of your account.
• Identity Verification Services: Verification results from third-party KYC service providers where automated identity checks are employed.

shopislot processes personal data only for specific, legitimate purposes. The following table summarises our primary data processing activities:

shopislot will not use your personal data for any purpose not described in this Policy without providing prior notice and, where required, obtaining your explicit consent. We do not engage in automated decision-making that produces significant legal effects on users without human oversight.

shopislot processes personal data on the following legal bases, in accordance with internationally recognised data protection principles:

• Contractual Necessity: Processing required to perform our contractual obligations to you, including account management and payment processing.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and international licensing conditions.
• Legitimate Interests: Processing necessary for shopislot's legitimate business interests, including fraud prevention, platform security, and service improvement — provided such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent, such as receiving promotional communications. You may withdraw consent at any time by contacting our support team.

shopislot does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data only in the following specific circumstances:

• Payment Service Providers: Personal and transaction data shared with our verified Malaysian payment partners (including providers operating Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB, Public Bank, and Hong Leong Connect networks) solely for the purpose of processing your deposits and withdrawals.
• KYC and Identity Verification Providers: Identity document data shared with third-party KYC verification services engaged by shopislot to fulfil our identity verification obligations.
• Fraud Prevention & Security Services: Technical and behavioural data shared with fraud detection providers to protect the integrity and security of the Platform and its users.
• Game Technology Providers: Anonymised or pseudonymised usage data may be shared with game software providers for the purpose of game performance monitoring and dispute resolution.
• Legal and Regulatory Authorities: shopislot may be required to disclose personal data to law enforcement agencies, regulatory authorities, or court orders where legally obligated to do so. shopislot will only comply with such disclosures where they are lawful, necessary, and proportionate.
• Business Transfers: In the event of a merger, acquisition, or asset sale involving shopislot, personal data held by us may be transferred to the acquiring entity, subject to the same data protection obligations as described in this Policy.

shopislot uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device by your web browser when you visit shopislot.cam. They enable us to remember your preferences, maintain your session, and analyse how the Platform is used.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These cannot be disabled without impairing core functionality (e.g., session management, security tokens, language preferences).
• Performance & Analytics Cookies: Used to collect anonymised data on how users interact with the Platform — pages visited, time on site, and error reports — to help us improve user experience.
• Functional Cookies: Enable the Platform to remember choices you have made (such as your preferred payment method) to provide a more personalised experience.
• Marketing Cookies (Opt-In Only): Used to display relevant promotional content to users who have opted into marketing communications. These are not activated without your explicit consent.

shopislot retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our international licensing obligations. The following general retention principles apply:

• Account Data: Retained for the duration of your account's active status and for a period of at least five (5) years following account closure, in accordance with AML and licensing retention requirements.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, as required by applicable anti-money laundering regulations.
• Transaction Records: Retained for a minimum of five (5) years in line with financial record-keeping obligations.
• Support Communications: Retained for up to three (3) years following the close of the relevant interaction, or longer where a dispute or legal matter remains unresolved.
• Technical and Usage Data: Retained in aggregated or anonymised form for analytical purposes; identifiable usage data is deleted or anonymised after twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised using industry-standard methods.

shopislot implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and shopislot.cam is encrypted using industry-standard Secure Socket Layer (SSL) protocols.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Secure Data Storage: Personal data is stored on secure servers protected by firewalls, intrusion detection systems, and regular security audits.
• Payment Security: Financial transaction data is processed via PCI DSS-compliant payment service providers. shopislot does not store full card or banking credentials on its own systems.
• Two-Factor Authentication: Available for all user accounts to add an additional layer of login security.

While shopislot takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your shopislot account and to notify our support team immediately if you suspect any unauthorised access.

shopislot recognises and upholds the following data subject rights in relation to your personal data. To exercise any of these rights, please contact our support team using the details in Section 14.

shopislot will respond to all data rights requests within a reasonable timeframe, and no later than 30 calendar days from receipt. We may request proof of identity before processing a data rights request to protect against fraudulent claims.

shopislot's Services are strictly intended for individuals who are at least 21 years of age. We do not knowingly collect personal data from persons under the age of 21. All accounts are subject to mandatory KYC age verification before withdrawals are processed.

If shopislot becomes aware that personal data has been collected from a person under the age of 21, the account will be immediately suspended, all associated data will be deleted in accordance with applicable law, and any deposits will be returned via the original payment method following verification.

shopislot operates internationally and may transfer personal data to servers or third-party processors located in countries outside of Malaysia. Such transfers may occur in connection with our hosting infrastructure, payment processing, KYC verification, and fraud prevention services.

Where personal data is transferred internationally, shopislot ensures that appropriate safeguards are in place to protect your data, including contractual obligations requiring third-party recipients to maintain data protection standards equivalent to those described in this Policy.

By using shopislot.cam, you acknowledge and consent to the transfer of your personal data to servers and processors located outside of Malaysia for the purposes described in this Policy.

shopislot reserves the right to update or amend this Privacy Policy at any time. Where material changes are made, we will notify registered users by email or by displaying a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of shopislot.cam following the publication of any updated Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed of how your data is managed.

If you have any questions, concerns, or requests relating to this Privacy Policy or our handling of your personal data, please contact our Data Privacy team through the following channels:

For data erasure requests, access requests, or complaints regarding our data practices, please include your registered account email address and a clear description of your request. shopislot will acknowledge all privacy-related requests within 5 business days and aim to resolve them within 30 calendar days.

For matters related to responsible gambling, self-exclusion, or account restrictions, please visit our dedicated Responsible Gambling page.