Your privacy is a foundational commitment at Araslot — not a legal formality. This Privacy Policy explains in plain, structured terms exactly what personal data we collect, why we collect it, how it is used, and the rights you hold over your own information as a Malaysian player.
Before diving into the full policy, here are the core privacy principles that guide how Araslot handles every piece of data associated with your account.
We collect only the personal data that is genuinely necessary to operate your account, process your transactions, and comply with our legal obligations. We do not gather data for its own sake.
Araslot does not sell, rent, or commercially trade your personal data to any third party. Your information is used exclusively to run your account and improve your experience on our platform.
All personal data stored by Araslot is protected with AES-256 encryption at rest and TLS 1.3 encryption in transit — the same standards used by major Malaysian financial institutions including Maybank and CIMB.
You have the right to access, correct, export, restrict processing of, and request deletion of your personal data. These are not empty clauses — our support team is equipped to action these requests within 30 days.
Every category of personal data Araslot processes is identified in this Policy, along with the lawful basis for processing it. There are no hidden data flows. What is documented here is what we do — nothing more.
We understand the sensitivity of financial and personal data within the Malaysian context. Our data handling practices are designed to align with responsible data governance principles applicable to Malaysian users and their local payment ecosystem.
This Privacy Policy ("Policy") describes how Araslot ("we", "us", "our", "Platform") collects, processes, stores, and protects the personal data of individuals ("you", "Player", "User") who register an account with or access the services available at araslot.cam.
Araslot is an online casino and sports betting platform built for Malaysian players, offering casino games, sports betting markets, live dealer services, and related entertainment products. In the course of providing these services, we necessarily process personal data — including identity information, financial transaction records, and device usage data — in order to operate accounts, process payments in Malaysian Ringgit (MYR), and comply with applicable legal obligations.
This Policy applies to all personal data processed by Araslot in connection with the operation of the platform, regardless of whether the data is collected through the website, mobile application, customer support channels, or any other interaction with Araslot services.
Please read this Policy in full. By registering an account or continuing to use the Araslot platform, you acknowledge that you have read and understood the data practices described in this Policy. If you do not agree, you should discontinue use of the platform and request account closure.
The following terms carry the meanings defined below throughout this Privacy Policy:
Araslot operates as the Data Controller in respect of all personal data collected and processed through the araslot.cam platform. Araslot is an online entertainment platform serving Malaysian players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions of Malaysia.
All data protection queries, subject access requests, and privacy-related complaints should be directed to the Araslot Data Protection contact as set out in Section 15 (Contact Us) of this Policy. We will acknowledge all formal data protection requests within 5 business days and provide a substantive response within 30 calendar days unless the complexity of the request requires an extension, in which case we will notify you of the anticipated timeline.
Contact for data protection enquiries: [email protected] — please include the subject line "DATA PROTECTION REQUEST" and your registered username for priority routing.
Araslot collects personal data across several categories, depending on the nature of your interaction with the platform. The table below outlines the categories of data collected, the context in which they are gathered, and examples of specific data points within each category.
| Category | Collection Context | Examples |
|---|---|---|
| Identity Data | Account registration and KYC verification | Full legal name, date of birth, MyKad / passport number, nationality |
| Contact Data | Account registration and support interactions | Email address, Malaysian mobile number, residential address (where required for KYC) |
| Financial Data | Deposit and withdrawal transactions | Payment method details (e.g., Touch 'n Go eWallet, Maybank account reference), transaction amounts in MYR, transaction timestamps |
| Verification Documents | KYC process | Copies of MyKad or passport, selfie verification images, proof of payment method ownership |
| Behavioural / Usage Data | Platform interaction (automated collection) | Games played, betting history, session duration, deposit frequency, bonus utilisation patterns |
| Technical Data | Platform access (automated collection) | IP address, device type and operating system, browser type, session identifiers, geolocation data (country/city level) |
| Communications Data | Customer support interactions | Live chat transcripts, email correspondence, WhatsApp message records (where applicable), support ticket content |
| Preference Data | Account settings and marketing preferences | Language preference, notification settings, marketing opt-in / opt-out status, responsible gambling tool configurations |
Araslot does not collect or process special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, health data (beyond information voluntarily provided in the context of responsible gambling support), or data concerning sexual orientation.
Araslot processes personal data for the following specific purposes. Each purpose is tied to a lawful basis, which is set out in Section 6 of this Policy.
Araslot processes personal data only where a valid lawful basis exists for doing so. The lawful bases applicable to our primary processing activities are as follows:
Araslot does not sell personal data to third parties. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.
We engage trusted third-party service providers to support specific operational functions. These providers act as Data Processors under binding contractual agreements that prohibit them from using your data for any purpose beyond the specific service they are contracted to provide. Processor categories include:
Araslot may be required to disclose personal data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction in response to a lawful request, warrant, or court order. We will notify affected Players of such disclosures where legally permitted to do so.
Where a Player requests self-exclusion or is referred to an external responsible gambling support resource, limited personal data (such as account status and self-exclusion period) may be shared with relevant responsible gambling networks to give effect to the exclusion. This is done in the Player's best interest and only with their knowledge.
Araslot retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account identity and KYC records | 5 years from account closure | Legal obligation / AML compliance |
| Financial transaction records | 7 years from transaction date | Legal obligation / financial record-keeping |
| Customer support communications | 3 years from interaction date | Legitimate interests / dispute resolution |
| Behavioural and usage data | 2 years from last active session | Legitimate interests / platform improvement |
| Marketing preferences and consent records | Duration of account + 2 years | Consent / legal obligation |
| Self-exclusion records | Minimum 5 years from exclusion date | Responsible gambling obligations |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is used, the resulting data is no longer considered personal data and may be retained indefinitely for statistical or analytical purposes.
Araslot implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security controls in place include:
In the event of a personal data breach that poses a risk to your rights and interests, Araslot will notify affected Players without undue delay in accordance with applicable data protection obligations.
Araslot uses cookies and similar tracking technologies on the araslot.cam website to enable essential functionality, maintain session security, and understand how Players interact with our platform. The categories of cookies we use are:
You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Araslot platform, including the ability to log in or access games. Araslot does not use third-party advertising cookies or behavioural targeting technologies that profile you across websites outside of the Araslot domain.
As an Araslot Player, you have a range of rights in relation to your personal data. These rights are meaningful and actionable — not decorative clauses. To exercise any of the rights below, contact our Data Protection team at [email protected] with the subject line "DATA RIGHTS REQUEST".
Request a copy of all personal data Araslot holds about you, along with details of how it is being used and who it has been shared with.
Request correction of any inaccurate or incomplete personal data held in your Araslot account. Corrections are processed within 5 business days.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Request that we limit how we use your personal data in certain circumstances — for example, while the accuracy of your data is being contested.
Request a structured, machine-readable export of the personal data you have provided to Araslot, in a format that allows you to transfer it to another service.
Object to processing based on legitimate interests — including direct marketing. Objections to marketing are actioned immediately; other objections are assessed within 30 days.
All rights requests are processed within 30 calendar days. In cases of high complexity, this period may be extended by up to a further 60 days, with prior notification to you of the delay and its reason. There is no fee for making a rights request; however, where requests are manifestly unfounded or excessive, Araslot reserves the right to charge a reasonable administrative fee.
The Araslot platform is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the Araslot KYC process, and accounts cannot be fully activated without satisfactory proof of age.
If Araslot becomes aware that personal data has been submitted by or on behalf of an individual under the age of 21, the account will be immediately closed, all associated funds will be returned to the original depositing payment method, and all personal data associated with that account will be securely deleted in accordance with our data retention procedures. Parents or guardians who believe their minor child has registered an account on Araslot should contact [email protected] immediately.
Some of the third-party service providers engaged by Araslot — including cloud infrastructure providers and fraud detection services — may process personal data in jurisdictions outside of Malaysia. Where such transfers occur, Araslot ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that applied within Malaysia.
Safeguards for international transfers include contractual data protection clauses binding the recipient to obligations consistent with Araslot's privacy standards, and technical security controls including encryption in transit and at rest. Araslot will not transfer personal data to any jurisdiction that does not provide an adequate level of data protection without implementing additional appropriate safeguards.
Araslot may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. Material changes to this Policy will be communicated to registered Players via the email address on file, with at least 14 days' notice prior to the changes taking effect, except where an urgent update is required for security or legal compliance reasons.
The "Last Updated" date at the top of this page will reflect the date of the most recent revision. We encourage you to review this Policy periodically to remain informed about how Araslot protects your personal data. Your continued use of the platform following the effective date of any revised Policy constitutes your acknowledgement of the updated practices described therein.
For all data protection enquiries, subject access requests, marketing opt-out requests, and privacy-related complaints, please contact the Araslot Data Protection team through the following channels:
Araslot is committed to resolving all data protection queries fairly and transparently. If you feel your concern has not been adequately addressed, you may escalate your complaint to the relevant data protection authority in your jurisdiction.
Araslot is built on a foundation of player trust. Bank-grade security, transparent data practices, and a support team ready to address any privacy concern — 24/7, in your preferred language. For players aged 21 and above only.