Pentaslot Privacy Policy

1 Introduction

Pentaslot ("we", "our", or "us") operates the online gaming platform accessible at pentaslot.cam (the "Platform"). We are committed to protecting the privacy and personal data of all users, players, and visitors in accordance with applicable data protection principles and best practices.

This Privacy Policy (the "Policy") describes how Pentaslot collects, processes, stores, and discloses personal data in connection with your use of the Platform, and outlines the rights available to you in relation to your personal information. This Policy applies to all registered players, prospective users browsing the Platform, and any individual whose personal data is processed by Pentaslot.

This Policy should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and Pentaslot. In the event of any inconsistency between this Policy and the Terms & Conditions on a data protection matter, this Policy shall prevail.

2 Definitions

The following terms are used throughout this Policy with the meanings set out below:

Term	Meaning
"Personal Data"	Any information that identifies or could reasonably be used to identify a natural person, directly or indirectly — including name, identification number, email address, IP address, or payment details.
"Processing"	Any operation performed on personal data, including collection, recording, storage, use, disclosure, or deletion.
"Data Controller"	Pentaslot, as the entity that determines the purposes and means of processing personal data collected through the Platform.
"Data Processor"	A third-party organisation that processes personal data on behalf of Pentaslot under a contractual data processing agreement (e.g., payment gateway providers).
"Player" / "User"	Any individual who has registered an account on the Pentaslot Platform, or who accesses or uses the Platform's services.
"KYC"	Know Your Customer — the identity verification process that Pentaslot is required to conduct prior to processing withdrawals or in response to AML obligations.
"Cookies"	Small text files placed on a user's device by a website to store session information, preferences, and usage data.

3 Data We Collect

Pentaslot collects the following categories of personal data:

3.1 — Account Registration Data

• Full legal name (as it appears on your government-issued identification document)
• Date of birth (for age verification — Pentaslot requires all players to be aged 21 or above)
• Email address
• Malaysian mobile phone number
• Residential address
• Chosen username and encrypted password

3.2 — Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., Malaysian Identity Card / MyKad, Passport)
• Proof of address documentation (e.g., utility bill, bank statement)
• Proof of payment method ownership (e.g., screenshot of e-wallet or bank account reflecting account holder name)
• Source-of-funds documentation where required by anti-money laundering obligations

3.3 — Financial Transaction Data

• Deposit and withdrawal amounts and timestamps
• Payment method identifiers (e.g., last four digits of a card, registered mobile number for an e-wallet account)
• Transaction reference numbers
• Account balance history

3.4 — Gaming Activity Data

• Games played, bets placed, wagers won or lost, and session durations
• Bonus activations and wagering progress
• Sports betting market selections and in-play activity

3.5 — Technical & Device Data

• IP address and approximate geolocation data
• Device type, operating system, and browser information
• Session logs and Platform access timestamps
• Cookie identifiers and analytics data (see Section 9)

3.6 — Communication Data

• Records of communications with our customer support team via Live Chat, WhatsApp, or email
• Feedback, complaints, and dispute correspondence

4 How We Collect Your Data

Pentaslot collects personal data through the following channels:

• Directly from you: During account registration, KYC submission, deposit and withdrawal requests, customer support interactions, and promotional sign-ups.
• Automatically: Through cookies, session tracking, server logs, and analytics tools when you access and interact with the Platform.
• From third-party service providers: Identity verification bureaus, payment processors (including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, and Public Bank), fraud detection services, and analytics partners — all operating under contractual data processing agreements with Pentaslot.

5 Purpose of Data Processing

Pentaslot processes personal data for the following specific purposes:

Purpose	Description
Account Management	Creating, maintaining, and securing your Pentaslot account; processing login and authentication events; managing your account preferences.
Identity Verification	Verifying your age (21+ requirement) and identity through KYC procedures prior to processing withdrawals and to comply with anti-money laundering obligations.
Transaction Processing	Processing deposits via DuitNow, FPX, e-wallets, and bank transfers; processing withdrawal requests; maintaining accurate financial records.
Regulatory Compliance	Fulfilling obligations under anti-money laundering (AML) regulations, responsible gambling requirements, and any other applicable legal or regulatory framework.
Fraud Prevention	Detecting and preventing fraudulent activity, account abuse, multi-accounting, and money laundering through transaction monitoring and pattern analysis.
Customer Support	Responding to and resolving your queries, complaints, and disputes in Bahasa Melayu, English, or Mandarin via Live Chat, WhatsApp, and email.
Responsible Gambling	Monitoring gaming activity to identify potential signs of problem gambling and administering self-exclusion requests, deposit limits, and cooling-off periods.
Marketing Communications	Sending promotional emails, bonus notifications, and seasonal campaign communications where you have provided consent. You may opt out at any time.
Platform Improvement	Analysing aggregated usage data to improve Platform performance, game offerings, payment channel reliability, and user experience.

6 Legal Basis for Processing

Pentaslot processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to upon registration — including account creation, transaction processing, and bonus administration.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and tax record-keeping duties.
• Legitimate interests: Processing conducted for our legitimate business interests — including fraud detection, Platform security, and analytics — where such interests are not overridden by your rights and interests.
• Consent: Processing based on your specific consent, such as the sending of marketing communications. Consent may be withdrawn at any time by contacting our support team.

7 Data Sharing & Disclosure

Pentaslot does not sell your personal data. We do not disclose your personal data to third parties except in the following limited circumstances:

• Payment service providers: We share transactional data with payment processors (including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, and Public Bank) strictly as required to process your deposits and withdrawals.
• Identity verification providers: KYC documentation may be shared with approved identity verification bureaus to confirm your identity and age.
• Fraud and AML screening services: Transaction data may be analysed by fraud detection and anti-money laundering screening tools operating as our authorised data processors.
• Technology and hosting providers: Platform infrastructure and data storage services are provided by contracted technology partners subject to binding data processing agreements and confidentiality obligations.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or regulatory direction.
• Professional advisers: Legal, accounting, and compliance advisers may access relevant data on a need-to-know basis and are bound by professional confidentiality obligations.

8 Payment Data & Security

The security of your financial information is a top priority for Pentaslot. All payment data transmitted through the Platform is encrypted using industry-standard 256-bit SSL (Secure Sockets Layer) technology.

Pentaslot does not store full card numbers, banking login credentials, or e-wallet account passwords on its servers. Card payment processing is handled exclusively by PCI-DSS compliant payment gateways. E-wallet transactions via Touch 'n Go eWallet, Boost, and GrabPay are processed through the respective providers' secure APIs.

For FPX bank transfer transactions (Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect), Pentaslot operates as an approved FPX merchant and does not have access to your banking login credentials at any point in the transaction process.

9 Cookies & Tracking Technologies

The Pentaslot Platform uses cookies and similar tracking technologies to operate essential Platform functions, enhance user experience, and gather aggregate usage analytics. The following categories of cookies are used:

• Essential cookies: Required for the Platform to function correctly — including session management, login authentication, and security tokens. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your language preferences, display settings, and other personalisation choices to provide a consistent experience across sessions.
• Analytics cookies: Collect aggregate, anonymised data about how visitors use the Platform — including pages visited, time spent, and navigation paths — to help us improve Platform performance and content.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and suspicious login patterns.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will prevent certain Platform features from functioning correctly. Pentaslot does not use cookies to serve third-party advertising on the Platform.

10 Data Retention

Pentaslot retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following general retention principles apply:

• Account data: Retained for the duration of your active account plus a period of up to seven (7) years following account closure, as required for AML record-keeping and legal compliance purposes.
• Transaction records: Financial transaction records are retained for a minimum of seven (7) years in accordance with standard financial record-keeping requirements.
• KYC documentation: Identity and age verification documents are retained for the duration of your account and for up to seven (7) years following account closure.
• Customer support records: Communications with our support team are retained for up to three (3) years unless a longer retention period is required for dispute resolution or legal proceedings.
• Marketing data: Data held on the basis of consent for marketing purposes is retained until you withdraw consent or for three (3) years from your last interaction with a marketing communication, whichever occurs first.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual.

11 Your Rights as a Data Subject

As a player whose personal data is processed by Pentaslot, you have the following rights in relation to your personal information. To exercise any of these rights, please contact our support team using the details in Section 16.

We will respond to all verifiable data rights requests within a reasonable timeframe. For complex requests, we may require up to 30 days. We may need to verify your identity before processing your request. Pentaslot will not charge a fee for exercising these rights unless a request is manifestly unfounded or excessive.

12 Children & Minors

The Pentaslot Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21.

If we become aware that personal data has been collected from a person under the age of 21 — whether through our age verification processes or otherwise — the associated account will be immediately suspended and all personal data collected will be deleted in accordance with applicable requirements. Any funds in such an account will be handled in accordance with our Terms & Conditions and applicable law.

Parents and guardians who believe their child has accessed or registered on the Platform are requested to contact our support team immediately at [email protected].

13 Third-Party Services

The Pentaslot Platform integrates with third-party services that are essential to its operation — including payment gateways, game content providers, customer support infrastructure, and analytics tools. These integrations involve the transfer of limited personal data to the respective third-party providers as data processors acting on Pentaslot's behalf.

Pentaslot does not link to or embed third-party advertising networks, social media plugins, or external content that could result in the collection of your personal data by unauthorised parties. All third-party integrations are subject to contractual data processing agreements requiring compliance with applicable data protection obligations.

14 Cross-Border Data Transfers

In the course of operating the Platform, some of your personal data may be processed on servers or by service providers located outside of Malaysia. Where such transfers occur, Pentaslot takes all reasonable steps to ensure that adequate safeguards are in place — including contractual protections and equivalent data protection standards — to protect your personal data in transit and at rest across jurisdictions.

15 Changes to This Privacy Policy

Pentaslot reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, changes that affect how your personal data is used or your rights as a data subject — we will provide reasonable advance notice via email to your registered address and/or a prominent notice on the Platform.

The "Last Updated" date at the top of this page reflects the date on which the most recent revision to this Policy took effect. We encourage all players to review this Policy periodically to remain informed of how we handle their personal information. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the revised Policy.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the Pentaslot Privacy & Support Team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the Platform. Average response time is 3–5 minutes.
• WhatsApp: Available 24/7. Response times may be slightly longer during peak hours.
• Email (plain text — not a link): [email protected]

Support is available in Bahasa Melayu, English, and Mandarin. For data rights requests (access, rectification, erasure, portability), please include "Data Rights Request" in your subject line or opening message so that our team can route your enquiry correctly.