Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how Sloterbaik ("Sloterbaik", "we", "us", "our") collects, uses, stores, and shares personal data obtained from users ("you", "User", "Player") of the Sloterbaik online gaming platform, accessible at https://sloterbaik.cam (the "Platform").

Sloterbaik is committed to handling your personal data with integrity, transparency, and in accordance with applicable data protection laws and international best practices. This Policy forms part of our overall Terms and Conditions. By registering on, accessing, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy applies to all personal data collected through the Platform regardless of the device, browser, or network used to access it, including access from locations across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and elsewhere.

2. Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including but not limited to name, identification number, email address, payment details, device identifiers, and IP address.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, Sloterbaik.
• "Data Processor" means any third party that processes personal data on behalf of Sloterbaik pursuant to a data processing agreement.
• "KYC" means Know Your Customer — the identity verification procedures applied to user accounts in accordance with anti-money-laundering and regulatory requirements.
• "Cookies" means small text files placed on your device by the Platform to facilitate session management, preference storage, and usage analytics.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.

3. Data Controller

Sloterbaik acts as the Data Controller in respect of all personal data collected through the Platform. As Data Controller, Sloterbaik is responsible for determining the purposes for which your personal data is processed and ensuring that processing is conducted lawfully, fairly, and transparently.

Sloterbaik engages third-party Data Processors — including payment service providers, identity verification services, and analytics providers — who process personal data on our behalf and strictly in accordance with our documented instructions. All third-party Data Processors are bound by contractual data processing agreements that prohibit independent use of your personal data for any purpose other than those defined by Sloterbaik.

For all data protection enquiries, you may contact us via the channels listed in Section 15 of this Policy.

4. Data We Collect

4.1 Data You Provide Directly

The following categories of personal data are collected when you register, verify your identity, or interact with the Platform:

4.2 Data Collected Automatically

When you access the Platform, certain technical and usage data is collected automatically through cookies and server logs:

• Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, game titles accessed, betting and wagering activity, session duration, navigation paths, and error logs.
• Location Data: General geographic location derived from IP address (country and city level). Sloterbaik does not collect precise GPS location data.
• Cookie Data: Session cookies, authentication tokens, preference settings, and analytics identifiers. See Section 9 for full details.

4.3 Data Received from Third Parties

Sloterbaik may receive limited personal data from the following third-party sources:

• Payment Service Providers: Transaction status and verification data from Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency network providers.
• Identity Verification Services: Confirmation of identity document validity from third-party KYC providers engaged by Sloterbaik.
• Fraud Prevention Services: Risk signals and flaged device or IP data from third-party fraud detection vendors.

5. Purpose & Legal Basis for Processing

Sloterbaik processes your personal data for the following purposes, each supported by a defined legal basis:

6. Data Sharing & Disclosure

Sloterbaik does not sell, rent, or otherwise commercially disclose your personal data to third parties. We share personal data only in the following strictly limited circumstances:

6.1 Service Providers & Data Processors

We engage third-party service providers who process personal data on our behalf as Data Processors. These include: payment gateway operators (e.g., FPX, DuitNow integration providers); identity verification and KYC providers; fraud detection and risk management vendors; cloud hosting and server infrastructure providers; and customer support platform operators. All such providers are contractually prohibited from using your data for any purpose other than providing the specified service to Sloterbaik.

6.2 Regulatory & Law Enforcement Authorities

Sloterbaik may be legally required to disclose personal data to regulatory authorities, law enforcement agencies, courts, or government bodies where required by applicable law, a valid court order, or a lawful regulatory request. In such cases, we disclose only the minimum data required to satisfy the obligation and, where legally permissible, will notify you of such disclosure.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of Sloterbaik's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy terms applicable to your data under the new entity's ownership.

7. Data Retention

Sloterbaik retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money-laundering regulations.
• Transaction and Financial Records: Retained for a minimum of seven (7) years from the date of the transaction, in accordance with financial record-keeping obligations.
• KYC Documentation: Retained for a minimum of five (5) years following account closure or the completion of the relevant verification process, whichever is later.
• Support Communications: Retained for three (3) years from the date of the interaction, for quality assurance and dispute resolution purposes.
• Technical and Usage Logs: Retained for up to twelve (12) months, after which anonymised aggregate data may be retained indefinitely for analytics purposes.
• Marketing Preferences: Retained until you withdraw consent, after which your opt-out preference record is retained indefinitely to prevent inadvertent re-subscription.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using procedures that render the data permanently non-identifiable.

8. Data Security

Sloterbaik implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. These measures include:

• Encryption: AES-256 encryption for data at rest; TLS 1.3 encryption for all data in transit between your device and our servers.
• Access Controls: Role-based access control ensuring that only authorised personnel with a legitimate operational need can access personal data. Access is logged and audited.
• Network Security: Firewall protection, intrusion detection systems, and regular penetration testing of Platform infrastructure.
• Incident Response: A documented data breach response procedure. In the event of a breach affecting your personal data, Sloterbaik will notify you and relevant authorities as required by applicable law within the timeframes prescribed.
• Staff Training: All staff with access to personal data receive regular data protection and security awareness training.

9. Cookies & Tracking Technologies

Sloterbaik uses cookies and similar tracking technologies (collectively, "Cookies") on the Platform. Cookies are small text files stored on your device that help us recognise you, maintain your session, remember your preferences, and analyse how the Platform is used.

9.1 Types of Cookies Used

9.2 Managing Your Cookie Preferences

You may control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies, to receive a notification before cookie is stored. Please note that disabling cookies may affect the functionality of the Platform — in particular, session and authentication cookies are required for the Platform to operate correctly.

Instructions for managing cookies in commonly used browsers are available in each browser's help documentation. Sloterbaik does not use third-party advertising or behavioural targeting cookies.

10. International Data Transfers

Sloterbaik's platform infrastructure and certain third-party Data Processors may be located in jurisdictions outside of Malaysia. Where personal data is transferred internationally, Sloterbaik ensures that appropriate safeguards are in place to protect the data in transit and at its destination. These safeguards include:

• Binding contractual clauses in data processing agreements with all third-party recipients, requiring equivalent standards of data protection to those applied by Sloterbaik.
• Preference for Data Processors that operate in jurisdictions recognised as providing adequate data protection standards.
• Technical security controls applied uniformly regardless of processing location.

11. Minors & Age Restriction

The Sloterbaik Platform is strictly intended for adults aged21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Registration on the Platform by a person under the age of 21 is material breach of our Terms and Conditions.

Where Sloterbaik identifies or is notified that an account belongs to an individual under 21, the account will be immediately closed, all associated personal data will be deleted (or retained only to the minimum extent required by law), and any funds deposited will be returned to the originating payment method less any gaming losses incurred.

Parents and guardians who are concerned that a minor may have registered on the Platform are encouraged to contact our support team immediately via live chat.

12. Your Data Rights

As a data subject, you hold the following rights in relation to the personal data Sloterbaik holds about you. To exercise any of these rights, please contact us using the details in Section 15. We aim to respond to all data rights requests within 30 calendar days of receipt.