How balislot Protects Your Personal Information

This Privacy Policy governs the processing of personal data by balislot in connection with the online casino, live dealer, slot, sportsbook, payment, support, and account-management services available through https://balislot.cam. In this Policy, “personal data” means information that identifies an individual or can reasonably be associated with an identifiable individual.

The Policy applies when you browse balislot, register an account, complete KYC checks, deposit or withdraw MYR, use Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, or a supported cryptocurrency, place a wager, request a limit, or contact support. It also applies to technical information generated through your interaction with balislot.

balislot acts as the controller of personal data processed for its own operational purposes. Certain payment, game, identity-verification, hosting, and security providers may process information on behalf of balislot under appropriate contractual controls.

balislot may collect the following categories of information where relevant to your use of the platform:

• Registration information: your name, date of birth, username, password credentials, email address, mobile number, residential location, and preferred currency.
• Identity information: MyKAD or passport details, document images, verification results, and a selfie or other identity-confirmation material.
• Account activity: login history, game sessions, casino wagers, sportsbook selections, Liga Super Malaysia or EPL betting activity, bonuses, loyalty status, and account preferences.
• Financial information: deposit and withdrawal amounts, selected payment method, masked bank or e-wallet details, transaction references, and supported cryptocurrency wallet information.
• Technical information: IP address, device type, browser, operating system, language, approximate location, session identifiers, and security logs.
• Support records: live chat transcripts, email correspondence, complaints, verification enquiries, withdrawal questions, and responsible gambling requests.

Most personal data is collected directly from you. This occurs when you enter registration details, upload identity documents, choose a payment method, place a bet, change your account settings, request a withdrawal, set a deposit limit, or speak with the balislot support team.

Other information is collected automatically when you use balislot. For example, security systems may record your IP address, browser type, device identifier, login time, navigation path, and failed login attempts. These records help maintain platform stability, investigate suspicious activity, and protect player accounts.

balislot may also receive limited information from payment processors, Malaysian banking channels, e-wallet providers, identity-verification services, casino game suppliers, and sportsbook technology providers. Such information may include whether a payment succeeded, whether identity details matched, or whether unusual account activity requires review.

balislot uses personal data only where there is a legitimate and defined reason. Principal processing purposes include:

• Creating, maintaining, authenticating, and securing your balislot account;
• Confirming that users satisfy the balislot minimum age requirement of 21 years;
• Processing MYR deposits, bonuses, casino wagers, sports bets, winnings, refunds, and withdrawals;
• Completing KYC, fraud-prevention, anti-abuse, payment-risk, and account-integrity reviews;
• Providing live chat, payment assistance, technical support, and complaint handling;
• Operating loyalty tiers, cashback calculations, promotions, and eligible account rewards;
• Applying deposit limits, cooling-off periods, self-exclusion, and other responsible gambling measures;
• Monitoring performance, correcting technical errors, and improving the reliability of balislot services;
• Sending service messages about transactions, account security, policy updates, and material platform changes.

balislot does not use KYC documents to create public profiles and does not sell identity documents or payment records as a commercial data product.

Depending on the activity and applicable law, balislot processes information because it is necessary to perform the agreement with you, satisfy a legal or compliance obligation, pursue a legitimate operational interest, protect users and the platform, or act on your consent.

Contract-related processing includes account administration, wager settlement, bonus application, and payment handling. Legitimate interests may include platform security, fraud prevention, customer support, technical analysis, and protecting the integrity of casino games and sports markets. Where balislot relies on consent for optional marketing or similar activity, you may withdraw that consent through the available account controls or by contacting support.

Withdrawal of consent does not invalidate processing completed before withdrawal. Some information may still need to be retained where necessary to manage a transaction, investigate misuse, enforce the balislot Terms & Conditions, or satisfy an applicable legal requirement.

Payment and identity information receive additional attention because they are sensitive and necessary for secure account operation. balislot may verify that the name on a Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or FPX payment source corresponds with the registered account holder.

KYC material may be examined to confirm age, identity, document validity, and payment ownership. balislot may request additional evidence when a transaction pattern is unusual, account information is inconsistent, a high-value withdrawal requires review, or fraud-prevention controls identify elevated risk.

Card, e-wallet, bank, and cryptocurrency transactions may be processed through specialist providers. balislot generally receives transaction status, amount, reference, and limited account identifiers rather than unnecessary full payment credentials.

balislot may use cookies, local storage, session identifiers, and similar technologies to maintain login sessions, remember language or display preferences, support navigation, monitor platform performance, and detect potentially fraudulent behaviour.

Essential technologies are required for core functions such as authentication, account security, payment-session continuity, and load balancing. Analytics technologies may help balislot understand general usage patterns, such as which platform sections load slowly or which device types experience technical errors.

Browser controls may allow you to remove or block certain cookies. Disabling essential cookies can prevent login, interrupt deposits, remove saved preferences, or stop parts of the balislot platform from operating correctly.

balislot does not sell personal data. Information may be disclosed only where reasonably necessary to operate services, protect the platform, process transactions, or comply with a valid obligation. Recipients may include:

• Payment processors, Malaysian bank-transfer channels, e-wallet operators, and cryptocurrency transaction providers;
• Identity-verification, fraud-prevention, cybersecurity, hosting, and technical-support providers;
• Casino game and sportsbook suppliers where limited identifiers or session data are required to deliver or settle gameplay;
• Professional advisers, auditors, insurers, or dispute-resolution specialists subject to confidentiality duties;
• Competent authorities where disclosure is required by law, lawful process, or a valid regulatory or law-enforcement request;
• A successor entity if balislot undergoes a legitimate business reorganisation, merger, or transfer, subject to appropriate privacy protections.

Service providers are expected to process information only for authorised purposes, maintain confidentiality, and apply security controls appropriate to the information they handle.

Some balislot technology, game, security, or payment providers may operate infrastructure outside Malaysia. As a result, information may be processed or stored in another jurisdiction whose data protection rules differ from those applying in Malaysia.

Where international processing occurs, balislot seeks to use appropriate contractual, organisational, and technical measures. These may include data-processing agreements, confidentiality obligations, restricted access, encryption, and assessments of the service provider's security practices.

International processing does not change the purposes described in this Policy. balislot remains responsible for selecting providers that can support secure and reliable service delivery.

balislot uses layered technical and organisational safeguards intended to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Measures may include encryption in transit, controlled administrative access, authentication controls, security monitoring, backup procedures, staff confidentiality duties, and periodic review of sensitive systems.

No internet service can guarantee absolute security. Users also play an important role by choosing a unique password, protecting their registered mobile device, reviewing account activity, and informing balislot promptly if they suspect unauthorised access.

If a personal-data incident creates a material risk to users, balislot will assess the incident, take reasonable containment measures, and issue notices where required by applicable law.

balislot retains information only for as long as reasonably necessary for the purpose for which it was collected, including account service, transaction reconciliation, fraud prevention, dispute management, responsible gambling controls, and applicable legal or compliance obligations.

Retention periods vary according to the type of data. Basic account and transaction records may be retained after account closure where necessary to answer payment disputes, document self-exclusion, investigate abuse, or maintain financial records. Routine technical logs may be retained for a shorter period unless they are relevant to a security investigation.

When data is no longer required, balislot will take reasonable steps to delete, anonymise, or securely isolate it. Anonymised statistical information that no longer identifies a user may be retained for platform analysis and service improvement.

Subject to identity verification, applicable law, and any valid exemption, you may ask balislot to explain or act on personal data associated with your account. Available rights may include:

To protect account holders, balislot may ask for identity verification before completing a privacy request. Requests may be limited or refused where compliance would expose another person's data, undermine fraud prevention, conflict with responsible gambling safeguards, or breach a valid legal obligation.

Where permitted and selected by the user, balislot may send information about casino games, sports markets, VIP benefits, reload promotions, or eligible bonuses. Marketing preferences do not affect essential service communications.

You may opt out of optional promotional messages through the preference controls available in your account or by contacting customer support. balislot may still send necessary messages relating to account security, a pending MYR withdrawal, policy amendments, responsible gambling actions, or changes that materially affect the service.

Promotional eligibility may depend on factors such as account status, age verification, active self-exclusion, payment method, or whether a bonus has already been claimed. balislot will not intentionally send promotional gambling messages to a self-excluded user.

balislot may process information about deposit limits, loss limits, session reminders, cooling-off periods, support contacts, and self-exclusion requests. This information is used to apply the selected control, respond to safety concerns, and prevent an excluded account from being reopened improperly.

Relevant account activity may also be reviewed where patterns indicate possible harmful play. This does not guarantee that every risk will be detected, and players remain responsible for monitoring their spending and taking breaks. Gambling should be entertainment, not a source of income.

Privacy requests will not normally be used to erase an active self-exclusion record before the applicable exclusion period ends. Maintaining that record is necessary to respect the player's safety decision and protect the integrity of the balislot responsible gambling programme. More information is available on the Responsible Gambling page.

balislot is strictly intended for players aged 21 and above. The platform does not knowingly permit minors to register, deposit, play casino games, or place sports bets. Age and identity checks may be conducted during registration, KYC review, payment review, or before a withdrawal is released.

If balislot identifies an account operated by a person under 21, the account may be suspended or closed and relevant data retained for fraud prevention, age-control enforcement, and transaction review. Parents and guardians should use device restrictions and parental controls on shared phones, tablets, and computers.

Anyone who believes a person under 21 has provided personal information to balislot should notify customer support. The matter will be reviewed promptly and appropriate action taken.

balislot may update this Privacy Policy to reflect changes in technology, payment methods, services, security practices, or applicable requirements. The revised version will be published on this page with an updated effective date.

Where a change materially affects how personal data is used, balislot may provide an additional account notice or other prominent communication. Users should review this page periodically, particularly before submitting new identity or payment information.

Continued use of balislot after an updated Policy takes effect means you acknowledge the revised information. Any use of the platform remains subject to the current Terms & Conditions.