Last Updated: 1 January 2026
Section 01
Introduction
Unoslot ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses, registers on, or transacts through the Unoslot website at unoslot.cam and its associated mobile-optimised interfaces (collectively, "the Platform"). This Privacy Policy ("Policy") sets out in plain, structured terms how Unoslot collects, stores, processes, shares, and safeguards your personal data, and the rights you retain in respect of that data.
This Policy applies to all current and former Members, visitors, and prospective users of the Platform, regardless of the device or network through which the Platform is accessed. It covers data collected online — through the website and any application — as well as data provided offline through our customer support channels, including live chat and email correspondence.
By registering an account or continuing to access the Platform, you acknowledge that you have read and understood this Policy and you consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should discontinue use of the Platform and contact us to close your account.
This Policy should be read in conjunction with our Terms & Conditions. In the event of any conflict between this Policy and the Terms, the Terms shall prevail with respect to contractual matters, while this Policy governs all data protection matters.
Section 02
Definitions
The following definitions apply throughout this Privacy Policy:
- "Personal Data" — any information relating to an identified or identifiable natural person ("Data Subject"), including but not limited to name, identification number, contact details, financial information, location data, and online identifiers.
- "Processing" — any operation performed on Personal Data, whether automated or manual, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, or erasure.
- "Data Controller" — Unoslot, the entity that determines the purposes and means of Processing Personal Data collected through the Platform.
- "Data Processor" — any third party that processes Personal Data on behalf of Unoslot under contractual instruction, including payment service providers and hosting infrastructure providers.
- "Member" / "User" — any individual who has registered an account on the Platform or is otherwise identified through use of the Platform.
- "Cookies" — small data files stored on a user's device by the Platform, used for session management, analytics, and personalisation purposes.
- "KYC" — Know Your Customer verification, encompassing identity, age, and address verification processes mandated for regulatory compliance and fraud prevention.
- "Sensitive Data" — a subset of Personal Data requiring heightened protection, including information relating to health, financial circumstances, and government-issued identification documents submitted during KYC.
Section 03
Data We Collect
Unoslot collects personal data that is necessary for the operation of the Platform, the fulfilment of regulatory obligations, and the delivery of a personalised and secure gaming experience. The categories of data we collect are described in the table below.
| Data Category |
Examples |
Purpose |
| Identity Data |
Full legal name, date of birth, MyKad or passport number, nationality |
Account registration, age verification, KYC compliance |
| Contact Data |
Email address, mobile number, residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru) |
Account communications, support correspondence, transaction notifications |
| Financial Data |
Bank account details, e-wallet identifiers (Touch 'n Go, Boost, GrabPay), FPX/DuitNow reference numbers, transaction history |
Deposit and withdrawal processing, fraud detection, AML compliance |
| Identity Verification Documents |
Scanned copies of MyKad, passport, driving licence, utility bills, bank statements |
KYC verification, age confirmation, source-of-funds checks |
| Technical Data |
IP address, device type, browser type and version, operating system, screen resolution, session timestamps |
Security monitoring, fraud prevention, platform optimisation |
| Usage Data |
Pages visited, games played, betting history, session duration, click paths, feature interactions |
Service personalisation, product improvement, responsible gambling monitoring |
| Communication Data |
Live chat transcripts, email correspondence, support ticket content |
Support resolution, quality assurance, dispute handling |
| Marketing Preferences |
Opted-in promotional channels, bonus claim history, communication opt-out status |
Delivering relevant promotions, respecting communication preferences |
Unoslot operates on a data minimisation principle. We collect only what is necessary for the stated purpose. We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or biometric data beyond what is required for identity document verification under our KYC obligations.
Section 04
How We Collect Your Data
Unoslot collects Personal Data through the following channels and mechanisms:
- Direct provision by you: Data you submit when completing the registration form, updating your account profile, submitting KYC documents, contacting customer support, or participating in promotions.
- Automated collection: Technical and Usage Data collected automatically through cookies, pixel tags, server logs, and analytics tools when you browse or interact with the Platform.
- Payment service providers: Transaction confirmation data, payment method identifiers, and fraud signals passed to us by our integrated payment partners including DuitNow, FPX operators, Touch 'n Go eWallet, Boost, and GrabPay.
- Identity verification partners: Data returned from third-party KYC verification services used to authenticate identity documents and cross-reference against regulatory watchlists.
- Game providers: Session-level game activity data passed to us from licensed third-party Game Providers whose content is integrated into the Platform.
- Fraud and security tools: Risk signals and device fingerprint data from our integrated fraud detection and security monitoring systems.
- Publicly available sources: In limited circumstances, data from publicly available databases may be used to supplement KYC or fraud investigation processes.
Section 05
Legal Basis for Processing
Unoslot processes your Personal Data on one or more of the following legal grounds, depending on the nature and purpose of the processing activity:
- Contractual necessity: Processing required to fulfil the contract between Unoslot and the Member — including account management, deposits, withdrawals, game access, and customer support.
- Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) obligations, identity verification mandates, and record-keeping requirements.
- Legitimate interests: Processing necessary for the legitimate interests of Unoslot, such as fraud prevention, platform security, product analytics, and responsible gambling monitoring — provided these interests are not overridden by the rights and interests of the Data Subject.
- Consent: Processing based on your freely given, specific, and informed consent — for example, the sending of direct marketing communications or the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
- Vital interests: Processing necessary to protect the vital interests of a Data Subject or another individual, including in emergency responsible gambling situations.
Section 06
How We Use Your Data
Unoslot uses the Personal Data we collect for clearly defined, lawful purposes. The primary uses are set out below:
- Account management: Creating, maintaining, and administering your Unoslot Member account, including processing login credentials, updating profile information, and communicating account-related notices.
- Transaction processing: Facilitating deposits and withdrawals in MYR via your chosen payment method — including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, and cryptocurrency channels.
- Identity and age verification: Conducting KYC checks to confirm your identity, verify that you are aged 21 or above, and validate your right to use the Platform in your jurisdiction.
- Fraud prevention and security: Detecting and investigating suspicious activity, unauthorised access attempts, bonus abuse, money laundering indicators, and other security threats to the Platform and its Members.
- Regulatory compliance: Meeting our obligations under applicable anti-money laundering, counter-terrorism financing, and data protection frameworks — including maintaining transaction records and responding to lawful regulatory or law enforcement requests.
- Customer support: Responding to support enquiries, resolving disputes, processing complaints, and providing technical assistance through our 24/7 live chat and email channels.
- Personalisation: Tailoring the gaming experience — including game recommendations, bonus offers, and interface preferences — to individual Member behaviour and stated preferences.
- Responsible gambling monitoring: Tracking usage patterns to identify indicators of problem gambling behaviour and triggering appropriate interventions such as responsible gambling notifications or account reviews.
- Marketing communications: Sending promotional offers, bonus notifications, and platform updates to Members who have opted in to receive such communications. You may opt out at any time via your account settings or by contacting support.
- Platform improvement: Analysing aggregated and anonymised usage data to identify product improvements, address technical issues, and enhance the overall player experience.
Section 07
Data Sharing & Disclosure
Unoslot does not sell, rent, or trade your Personal Data to any third party for commercial purposes. Data is shared only where necessary, under strict contractual controls, and for the purposes described in this Policy. The categories of recipients with whom data may be shared are as follows:
- Payment service providers: Licensed payment processors and financial institutions necessary to execute deposit and withdrawal transactions — including the operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and Malaysian banking partners (Maybank, CIMB, Public Bank, Hong Leong Bank).
- KYC and identity verification providers: Third-party services engaged to verify identity documents, screen against sanctions lists, and confirm age and address data submitted during registration or account review.
- Game providers: Licensed third-party Game Providers receive session identifiers and account-level data necessary to authenticate game sessions and process game outcomes. These providers operate under separate data processing agreements with Unoslot.
- Fraud and security vendors: Specialist providers of fraud detection, device fingerprinting, and cybersecurity services who process Technical Data on our behalf to protect the Platform and its Members.
- IT infrastructure and hosting providers: Cloud hosting and infrastructure providers who store and process data on Unoslot's behalf under binding data processing contracts with appropriate security obligations.
- Regulatory and law enforcement authorities: Where required by applicable law, court order, or binding regulatory directive, Unoslot may disclose Personal Data to relevant authorities, including financial intelligence units and law enforcement agencies. We will notify affected Members where legally permitted to do so.
- Professional advisers: Legal, accounting, and compliance advisers engaged by Unoslot who process limited Personal Data in the course of providing professional services, subject to professional confidentiality obligations.
All third-party Data Processors engaged by Unoslot are required to implement technical and organisational security measures equivalent to or exceeding those maintained by Unoslot, and are prohibited from using your data for any purpose beyond that which Unoslot has authorised.
Section 08
Cookies & Tracking Technologies
Unoslot uses cookies and similar tracking technologies to operate essential Platform functions, analyse usage patterns, and deliver a personalised experience. The categories of cookies we use are described below:
| Cookie Type |
Purpose |
Can Be Disabled? |
| Strictly Necessary |
Session authentication, login persistence, security tokens, fraud prevention signals |
No — required for Platform operation |
| Functional |
Remembering language preferences, interface settings, and game lobby customisations |
Yes — disabling affects user experience |
| Analytics |
Aggregated traffic analysis, page performance monitoring, user journey mapping (anonymised) |
Yes — opt out via cookie preferences |
| Marketing |
Personalised promotion delivery, bonus offer targeting based on usage behaviour |
Yes — opt out via account settings |
You may manage your cookie preferences at any time through your browser settings or the Platform's cookie preference centre. Please note that disabling strictly necessary cookies will impair your ability to log in and use core Platform features. Disabling analytics or marketing cookies will not affect your ability to play games or process transactions.
Section 09
Data Retention
Unoslot retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law or regulatory obligation. The general retention periods we apply are as follows:
- Active account data: Retained for the full duration of your active Membership, plus a minimum of five (5) years following account closure, to satisfy AML record-keeping and regulatory audit requirements.
- Transaction records: Financial transaction records, including deposit and withdrawal histories, are retained for a minimum of seven (7) years in accordance with applicable financial record-keeping standards.
- KYC documents: Identity verification documents are retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
- Support communications: Live chat transcripts and email correspondence are retained for three (3) years from the date of the interaction, or until the resolution of any related dispute or regulatory inquiry.
- Marketing data: Where processing is based on consent, marketing preference data is retained until you withdraw consent or request erasure.
- Technical and log data: Server logs and security event records are retained for up to twelve (12) months unless a longer period is required for an active security investigation.
Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised in accordance with our internal data disposal procedures.
Section 10
Data Security
Unoslot applies comprehensive technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, and unlawful disclosure. Our security framework includes:
- 256-bit SSL/TLS encryption applied to all data transmitted between your device and the Platform, ensuring that payment details, login credentials, and personal information cannot be intercepted in transit.
- Encrypted data storage for all sensitive data at rest, including KYC documents, financial records, and account credentials, using industry-standard encryption protocols.
- Access controls limiting internal access to Personal Data on a strict need-to-know basis, enforced through role-based access management and multi-factor authentication for all internal systems.
- Regular penetration testing and security audits conducted by independent third-party security specialists to identify and remediate vulnerabilities before they can be exploited.
- Fraud detection systems that monitor transaction patterns, login behaviour, and device characteristics in real time to flag and respond to potential security incidents.
- Data breach response procedures ensuring that, in the event of a confirmed data breach affecting your Personal Data, Unoslot will notify affected Members and relevant authorities within the timeframes required by applicable law.
While Unoslot employs robust security controls, no online platform can guarantee absolute security. We strongly encourage all Members to use strong, unique passwords, enable two-factor authentication, and report any suspected unauthorised account activity to our support team immediately.
Section 11
Your Rights as a Data Subject
As a Member of the Unoslot Platform, you hold the following rights in respect of your Personal Data. These rights may be exercised at any time by contacting our support team at the details set out in Section 16.
- Right of Access: You have the right to request a copy of the Personal Data Unoslot holds about you, together with information about how it is processed. We will respond to verified access requests within 30 days.
- Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data held about you. Minor details such as contact information can be updated directly through your account profile.
- Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis applies. This right is subject to Unoslot's obligation to retain certain data under applicable law.
- Right to Restriction of Processing: You may request that Unoslot restricts the processing of your Personal Data in certain circumstances — for example, while the accuracy of data is being contested or a legitimate interest objection is being assessed.
- Right to Data Portability: You have the right to receive Personal Data you have provided to Unoslot in a structured, commonly used, machine-readable format, and to request its transfer to another data controller where technically feasible.
- Right to Object: You may object at any time to processing based on legitimate interests — including profiling for marketing purposes. Unoslot will cease such processing unless compelling legitimate grounds can be demonstrated that override your interests.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.
To exercise any of the above rights, please submit a written request to our support team via live chat or email at [email protected]. We may require identity verification before processing your request to protect against unauthorised access to Personal Data.
Section 12
Minors & Age Policy
The Unoslot Platform is strictly intended for individuals aged 21 and above. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 21. Age verification is a mandatory step in our KYC process, and accounts where the Member's age cannot be confirmed to meet this threshold will be suspended pending verification.
If Unoslot becomes aware that Personal Data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that a minor in your care has created an account on the Platform, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action.
🔞 Unoslot enforces a strict 21+ age policy. Age verification is conducted at registration and may be repeated at any point during the account lifecycle. For more information, please see our Responsible Gambling page.
Section 13
International Data Transfers
In the course of operating the Platform and engaging third-party service providers — including Game Providers, payment processors, and cloud infrastructure operators — your Personal Data may be transferred to, processed in, or stored in jurisdictions outside Malaysia. Such transfers are carried out only where adequate data protection safeguards are in place.
Where data is transferred internationally, Unoslot ensures that such transfers occur under appropriate contractual mechanisms, including data processing agreements that impose data protection obligations equivalent to those applicable under this Policy. Unoslot does not transfer Personal Data to jurisdictions that do not provide an adequate level of protection without implementing additional safeguards.
Section 14
Third-Party Links & Integrations
The Unoslot Platform may contain references to or integrations with third-party services — such as Game Providers whose gaming interfaces are embedded within the Platform. Please note that these third parties operate their own privacy policies, and Unoslot is not responsible for the data practices of any third party whose services are accessed through or linked from the Platform.
We recommend that you review the privacy policies of any third-party services you interact with in connection with your use of the Platform. Unoslot's responsibility extends only to the data it directly collects and controls as a Data Controller.
Section 15
Policy Amendments
Unoslot reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. Where material changes are made, we will notify registered Members by posting a prominent notice on the Platform and, where practicable, by sending a notification to your registered email address at least seven (7) days prior to the changes taking effect.
The "Last Updated" date displayed at the top of this Policy indicates when the most recent revision was made. Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the revised terms. If you object to any amendment, you should cease using the Platform and contact us to close your account.