u2slot Privacy Policy — Your Data, Your Rights

Section 1

Introduction

This Privacy Policy is published by u2slot ("u2slot", "we", "our", or "us"), the operator of the platform accessible at u2slot.cam. It applies to all personal data processed in connection with the registration, operation, and closure of player accounts, together with any associated transactions, communications, and support interactions.

u2slot takes the privacy of its players seriously. Our platform serves individuals across Malaysia — including Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, and Shah Alam — and we recognise the trust you place in us when you provide personal information to access online gaming services. This policy explains how we honour that trust.

This Privacy Policy should be read together with the u2slot Terms & Conditions. Where there is a conflict between this policy and specific terms applicable to a service or transaction, the more specific provision governs that data processing activity.

Section 2

Definitions

For the purposes of this Privacy Policy:

• Personal Data means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, device identifiers, and behavioural data.
• Processing means any operation performed on personal data, including collection, recording, storage, use, disclosure, transfer, erasure, and destruction.
• Data Subject means the natural person to whom personal data relates — in this context, the registered u2slot player.
• Third Party means any person or entity other than u2slot and the data subject.
• KYC means Know Your Customer — the identity, age, and account verification process used for regulatory compliance and fraud prevention.
• Cookie means a small text file stored on the player's device by a web browser for session management, analytics, or functional purposes.

Section 3

Personal Data We Collect

u2slot collects personal data through registration, KYC submission, payment processing, gaming activity, customer support, and automated technical means. The categories of data we collect include:

3.1 Registration and Identity Data

• Full legal name as it appears on a valid identity document
• Date of birth (for mandatory age verification — players must be 21 or above)
• Malaysian residential address or other verified address
• Email address and mobile phone number
• Username and encrypted account credentials

3.2 Identity Verification (KYC) Documents

• Photograph of government-issued identity document — MyKad, Passport, or Driver's License
• Proof of address — recent utility bill or bank statement within three months
• Selfie or liveness check image accompanying an identity document where requested
• Payment-method ownership evidence where required (e.g. e-wallet screenshot, bank statement)

3.3 Financial and Transaction Data

• Deposit method details — e-wallet identifier, bank account reference, or payment token (not full card numbers)
• Transaction history: deposit amounts, withdrawal amounts, processing timestamps, and reference numbers
• Wallet balances, bonus credit status, and MYR currency activity

3.4 Gaming and Behavioural Data

• Wagering history — games played, stake amounts, win/loss records, and session durations
• Sports betting selections including EPL, Liga Super Malaysia, live football, and UFC markets
• Responsible gambling tool settings — deposit limits, time-out activations, or self-exclusion records
• Promotional claims, bonus usage, and wagering completion status

3.5 Technical and Device Data

• IP address and approximate geolocation derived from it
• Device type, operating system, and browser version
• Session tokens, login timestamps, and access logs
• Cookie identifiers and analytics tracking data — see Section 9

3.6 Communications Data

• Content of live chat messages, email correspondence, and support ticket records
• Preferences regarding marketing communications where consent has been provided

Section 4

How We Use Your Personal Data

The table below summarises the primary purposes for which u2slot processes player personal data:

u2slot does not use your personal data to make fully automated decisions with significant legal or similarly significant effects without providing appropriate review mechanisms.

Section 5

Legal Basis for Data Processing

u2slot relies on the following legal bases when processing personal data:

• Contractual necessity: Processing required to perform the obligations set out in the u2slot Terms & Conditions — including account management, payment processing, and game settlement.
• Legal obligation: Processing necessary to comply with applicable law, including identity verification, age verification, anti-money laundering checks, and regulatory reporting.
• Legitimate interests: Processing reasonably necessary for fraud prevention, security operations, platform analytics, and service improvement, where those interests are not overridden by the player's privacy rights.
• Consent: Processing for direct marketing communications or non-essential cookies, where you have provided a clear, informed, and freely given consent that you may withdraw at any time.

Section 6

Data Sharing and Disclosure

u2slot does not sell your personal data. We may share data with the following categories of recipients where necessary and proportionate:

• Payment service providers: Processors facilitating DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and other integrated Malaysian payment channels require transaction data to execute deposits and withdrawals.
• Identity verification and KYC partners: Third-party services that assist in verifying government-issued identity documents, liveness checks, and address confirmation.
• Game studio integrations: Licensed game providers receive session tokens and outcome data necessary to deliver casino games, live dealer tables, and sports markets. They process this data under their own compliance frameworks.
• Fraud prevention and security services: Vendors that analyse device fingerprints, IP addresses, and transaction patterns to detect and prevent fraudulent or prohibited activity.
• Regulatory and law enforcement authorities: Where u2slot is required by applicable law, court order, or regulatory instruction to disclose personal data, we will comply and will notify the affected player where legally permitted to do so.
• Professional advisers: Lawyers, auditors, and compliance consultants acting under strict confidentiality obligations where disclosure is necessary for professional advice or legal proceedings.

All third parties to whom we disclose personal data are contractually required to process it only for the purposes for which it was shared, and to maintain appropriate technical and organisational security measures.

Section 7

International Data Transfers

u2slot operates its infrastructure across multiple jurisdictions. Where personal data is transferred to a country that does not provide a standard of data protection equivalent to that applicable in Malaysia, we implement appropriate safeguards — such as standard contractual clauses, processor data-processing agreements, and vendor security assessments — to ensure that your data is protected to a consistent standard regardless of where it is processed.

If you would like further information about the safeguards applied to any specific international transfer, please contact us using the details in Section 12.

Section 8

Retention Periods

u2slot retains personal data for the period necessary to fulfil the purpose for which it was collected, subject to applicable legal and regulatory retention requirements. In general:

• Account and identity data is retained for the duration of the account relationship and for a reasonable period thereafter to manage outstanding obligations, respond to disputes, and comply with applicable retention laws.
• KYC documents are retained for the period required by applicable anti-money laundering and identity-verification obligations, which may extend beyond account closure.
• Financial and transaction records are retained for the period required by applicable financial record-keeping obligations — typically a minimum of five to seven years from the date of the transaction.
• Customer support correspondence is retained for a reasonable period sufficient to resolve disputes and manage follow-up queries.
• Marketing and consent records are retained until consent is withdrawn and for a reasonable period thereafter as evidence of the consent.

When data is no longer required, u2slot disposes of it securely and irreversibly. Where full deletion is not immediately possible due to technical constraints, data is isolated and protected until deletion can be completed.

Section 9

Cookies and Tracking Technologies

u2slot uses cookies and similar technologies on its platform. The types of cookies we use include:

• Strictly necessary cookies: These are essential for the platform to function — maintaining your authenticated session, remembering your login state, and enabling security checks. These cookies cannot be disabled without preventing the service from operating correctly.
• Functional cookies: These remember your preferences — such as language setting, currency display, or responsible gambling tool configuration — to personalise your experience across sessions.
• Analytics cookies: These help u2slot understand how players use the platform — which pages receive the most visits, where errors occur, and how the service can be improved. Data is aggregated and does not identify individual players in our analytics reporting.
• Marketing and tracking cookies: Where you have consented, these may be used to deliver relevant content and track the effectiveness of promotions. You may withdraw consent at any time through your browser settings or by contacting support.

Most browsers permit you to refuse or delete cookies. However, disabling strictly necessary cookies will prevent the u2slot platform from functioning. Instructions for managing cookies are available in your browser's help documentation.

Section 10

Data Security Measures

u2slot implements technical and organisational measures proportionate to the risk associated with the personal data it processes. These include:

• 256-bit TLS encryption for all data in transit between player devices and platform servers
• Encryption of sensitive data fields at rest within our database infrastructure
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Multi-factor authentication requirements for administrative and privileged system access
• Periodic security audits, vulnerability assessments, and penetration testing
• Incident response procedures enabling timely identification, containment, and notification of data security events

Despite these measures, no internet-based service is completely immune to security risk. Players can assist in protecting their own data by using strong passwords, enabling two-factor authentication on their u2slot account, and logging out of shared devices. If you suspect unauthorised access to your account, contact u2slot support immediately.

Section 11

Your Rights as a Data Subject

Subject to applicable law and any overriding legal retention or regulatory obligation, you may exercise the following rights with respect to your personal data held by u2slot:

• Right of access: You may request a summary of the personal data u2slot holds about you and the purposes for which it is being processed.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. You may also update certain registration details directly through your account settings.
• Right to erasure: You may request deletion of personal data that is no longer necessary for its original purpose, subject to applicable retention obligations. Certain data — particularly KYC and financial records — must be retained for the periods described in Section 8 irrespective of an erasure request.
• Right to restriction: You may request that we limit processing of your data in certain circumstances — for example, where you contest its accuracy or object to a specific processing purpose.
• Right to data portability: Where technically feasible and legally applicable, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes at any time. Where you object to marketing, we will cease using your data for that purpose promptly.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us using the details in Section 12. We will respond within a reasonable timeframe and may need to verify your identity before processing a request.

Section 12

Contact Us

For privacy-related enquiries, data access requests, consent withdrawal, or questions about how u2slot handles personal data, please contact our support team:

• Live Chat: Available 24/7 through the u2slot platform
• Email: [email protected]
• Email support hours: Monday–Sunday, 09:00–23:00 MYT
• Response target: Within two business hours during Malaysian support hours

Please include your registered username, a brief description of your query, and — for access or erasure requests — sufficient identifying information to allow us to locate and verify your account.

Section 13

Updates to This Privacy Policy

u2slot may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory guidance, technology, or our processing activities. Where a material change is made, we will publish the updated policy with a revised effective date. Continued use of u2slot after an updated policy takes effect constitutes acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically. The most current version is always accessible at u2slot.cam/privacy-policy.