Privacy Policy

This Privacy Policy ("Policy") is issued by LondonSlot ("LondonSlot", "we", "us", "our"), the operator of the online gaming platform accessible at https://londonslot.cam ("the Platform"). It sets out how LondonSlot collects, processes, stores, shares, and protects personal data provided by or generated through the use of our Platform by registered players and visitors ("you", "your", "the Data Subject").

LondonSlot operates as an English-language online gaming platform targeting players in Malaysia. We are committed to handling personal data responsibly and in accordance with applicable data protection legislation and international best practices for personal data governance.

This Policy should be read together with our Terms & Conditions, which govern your use of the Platform and are incorporated herein by reference. By registering an Account, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

In this Policy, the following terms carry the meanings set out below:

• "Account" — a registered player account created on the LondonSlot Platform.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. LondonSlot is the Data Controller in respect of all personal data processed under this Policy.
• "Data Processor" — a third party that processes personal data on behalf of LondonSlot pursuant to a contractual arrangement, such as a KYC verification provider or payment processor.
• "Data Subject" — any identified or identifiable natural person whose personal data is processed by LondonSlot. This includes all registered players and Platform visitors.
• "Personal Data" — any information that relates to an identified or identifiable natural person, including name, email address, date of birth, device identifiers, IP address, payment details, and gameplay records.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.
• "KYC" — Know Your Customer procedures required under applicable anti-money laundering (AML) and counter-terrorism financing (CTF) regulations.
• "Special Category Data" — data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, biometric data, health data, or data concerning a person's sex life or sexual orientation. LondonSlot does not intentionally collect Special Category Data.

LondonSlot collects personal data through three primary channels: data you provide directly, data generated automatically through your use of the Platform, and data received from third parties.

3.1 Data You Provide Directly

3.2 Data Generated Automatically

• Technical Data: IP address, device type and operating system, browser type and version, screen resolution, and time zone.
• Usage Data: Pages visited, games played, session duration, bet amounts, game results, transaction history, bonus redemption records, and login timestamps.
• Cookie and Tracking Data: Session cookies, analytics cookies, and fraud prevention tracking identifiers. See Section 7 for full details.

3.3 Data from Third Parties

• KYC / AML providers: Identity verification status, document authenticity checks, sanctions screening results, PEP (Politically Exposed Persons) status.
• Payment processors: Transaction confirmation data, chargeback notifications, fraud alerts.
• Fraud prevention services: Device fingerprint data, behavioural anomaly flags.

LondonSlot processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and LondonSlot — specifically to operate your Account, process deposits and withdrawals, resolve disputes, and deliver gaming services.
• Legal Obligation: Processing required to comply with applicable laws — including KYC and AML obligations, age verification requirements, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate Interests: Processing necessary for LondonSlot's legitimate business interests, where those interests are not overridden by your fundamental rights and freedoms. Examples include fraud prevention, platform security, responsible gambling monitoring, and service analytics.
• Consent: For marketing communications and non-essential cookies, we rely on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

LondonSlot uses personal data for the following purposes:

• Account Management: Creating and maintaining your Account, authenticating logins, enabling password recovery, and managing your preferences.
• Service Delivery: Processing deposits and withdrawals in MYR via FPX, Touch 'n Go eWallet, Boost, GrabPay, DuitNow QR, and cryptocurrency channels; granting access to Games; crediting bonuses.
• Identity & Age Verification: Verifying that you are aged 21 or above and that your identity matches the registration data provided, in compliance with our KYC obligations.
• AML & Fraud Prevention: Monitoring transactions and gameplay patterns to detect and prevent money laundering, fraud, and bonus abuse. Conducting sanctions and PEP screening.
• Responsible Gambling: Monitoring for indicators of problem gambling behaviour; applying self-exclusion, deposit limits, and cooling-off periods; communicating responsible gambling resources.
• Customer Support: Responding to enquiries, resolving complaints, processing refund or dispute requests, and improving service quality based on support interaction data.
• Legal & Regulatory Compliance: Retaining records as required by applicable AML, KYC, and gambling regulations; responding to lawful requests from regulatory or law enforcement bodies.
• Analytics & Platform Improvement: Analysing aggregated, anonymised usage data to understand player behaviour, identify platform issues, and improve the overall user experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and responsible gambling reminders to players who have consented to receive such communications.

LondonSlot does not sell, rent, or trade your personal data. Data is shared with third parties only in the following circumstances, and only to the extent necessary for the stated purpose:

• Payment Processors: Your payment details are shared with the relevant payment processor (for example, FPX banking partners including Maybank, CIMB, Public Bank, and Hong Leong; e-wallet providers including Touch 'n Go eWallet, Boost, GrabPay, and DuitNow; and cryptocurrency network operators) solely to process deposit and withdrawal transactions.
• KYC and Identity Verification Providers: KYC documentation is shared with our licensed identity verification partners for the purpose of age verification and AML compliance screening. These providers process data as Data Processors under contractual agreements requiring compliance with applicable data protection standards.
• Fraud Prevention Services: Technical and behavioural data may be shared with fraud detection service providers to identify and prevent fraudulent activity, collusion, and abuse.
• Regulatory and Law Enforcement Authorities: LondonSlot will disclose personal data to competent regulatory or law enforcement authorities where required by law, pursuant to a valid legal order, or where disclosure is necessary to protect the rights, property, or safety of LondonSlot, our players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a substantial part of LondonSlot's business, personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

LondonSlot uses cookies and similar technologies to operate the Platform securely and to understand how players interact with it. We do not use third-party advertising cookies or cross-site tracking for behavioural advertising purposes.

The following categories of cookies are used on the Platform:

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. Disabling analytics cookies will not affect your access to any Platform features.

LondonSlot retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and Transaction Data: Retained for a minimum of 5 years following Account closure, as required by applicable AML and gambling regulations. This includes registration records, KYC documentation, deposit and withdrawal history, and bonus claim records.
• Customer Support Records: Retained for 3 years from the date of the last interaction, or longer if the interaction relates to a dispute that remains unresolved or is subject to regulatory inquiry.
• Responsible Gambling Records: Self-exclusion records and problem gambling flags are retained for the duration of any exclusion period plus 2 years, to prevent re-registration during an active exclusion.
• Marketing Consent Records: Retained for 3 years from the date of withdrawal of consent, to demonstrate compliance in the event of a regulatory inquiry.
• Technical and Log Data: System logs and access records retained for 12 months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identified individual.

LondonSlot operates infrastructure and engages third-party service providers that may process personal data in countries outside Malaysia. Where data is transferred internationally, LondonSlot takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law.

Safeguards used for international transfers may include: standard contractual clauses approved by competent data protection authorities; adequacy decisions in respect of the destination country; or binding corporate rules where the recipient is part of an affiliated group.

As a Data Subject, you have the following rights in respect of your personal data held by LondonSlot. You may exercise these rights by contacting us as described in Section 14. We will respond to all valid requests within 30 calendar days. Complex requests may require up to 90 days; we will notify you if an extension is required.

The LondonSlot Platform is strictly for individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data belonging to persons under the age of 21. Age verification is conducted as part of the KYC process and may be required at registration or at any subsequent point.

If we become aware that personal data has been collected from a person under the age of 21, we will immediately close the associated Account, return any deposited funds to the payment source, delete the personal data, and, where required, notify the relevant regulatory authority.

LondonSlot implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• Encryption in Transit: All data transmitted between your browser or app and LondonSlot servers is protected by 256-bit SSL/TLS encryption.
• Encryption at Rest: Sensitive stored data — including KYC documents and payment details — is encrypted at rest using industry-standard encryption protocols.
• Password Security: Passwords are stored using modern one-way hashing algorithms with salting. LondonSlot never stores passwords in plaintext and will never ask you to provide your password via any communication channel.
• Multi-Factor Authentication (MFA): Optional MFA is available to all Account holders and is strongly recommended, particularly for accounts with larger balances or frequent withdrawals.
• Access Controls: Internal access to personal data is restricted on a need-to-know basis. Staff with access to personal data are trained in data protection obligations and subject to confidentiality agreements.
• Infrastructure Monitoring: Our systems are monitored 24/7 for intrusion attempts, anomalous access patterns, and system vulnerabilities.
• Data Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, LondonSlot will notify you and, where required, the relevant supervisory authority within the timeframes specified by applicable law.

While we take all reasonable precautions to protect your data, no online platform can guarantee absolute security. You play an important role in securing your Account — use a strong, unique password and do not share your credentials with anyone.

LondonSlot reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of our business. The revised Policy will be published on this page with an updated effective date.

Where changes are material — meaning they substantially affect your rights as a Data Subject or the way we handle your personal data — we will provide advance notice to registered players by email at least 14 days before the changes take effect. We encourage you to review this Policy periodically even in the absence of a notification.

Your continued use of the Platform following the effective date of an updated Policy constitutes acceptance of the revised terms. If you do not accept the revised Policy, you should cease using the Platform and request Account closure.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the LondonSlot Data Privacy team through the following channels:

• Email (plain text — not a clickable link): [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the Platform.
• Subject Line for Data Requests: "Data Subject Request" — include your Account username and a clear description of your request.
• Response Time: We aim to acknowledge all privacy-related enquiries within 24 hours and provide a substantive response within 30 calendar days.

For general Account support, payment queries, or responsible gambling assistance, please visit our FAQ page or our Responsible Gambling page.