Privacy Policy

01 Introduction

SL888 (referred to herein as "SL888", "we", "us", or "our") operates the online entertainment platform accessible at sl888.casa (the "Platform"). We are committed to protecting the personal data of all individuals who interact with our Platform, including registered members, visitors, and prospective users.

This Privacy Policy ("Policy") describes how SL888 collects, receives, uses, stores, shares, transfers, and otherwise processes personal data in connection with your use of our Platform and Services. It applies to all data processing activities carried out by SL888 in relation to Platform users, regardless of the device or channel used to access our services.

By registering an account, depositing funds, or otherwise using the SL888 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.

02 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that relates to an identified or identifiable natural person. This includes your name, email address, phone number, payment details, device identifiers, and browsing behaviour on the Platform.
• "Processing" — any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, SL888 acts as the Data Controller in relation to member data.
• "Data Processor" — a third party that processes personal data on behalf of and under the instruction of the Data Controller.
• "Member" — any individual who has successfully registered a verified account on the SL888 Platform.
• "Sensitive Data" — a subset of personal data that by its nature requires a higher level of protection, including identity document numbers, financial account details, and biometric verification data.
• "KYC Data" — identity and address verification documents provided by Members pursuant to our Know Your Customer obligations, including copies of Malaysian MyKad, passport, driver's licence, and recent utility bills or bank statements.

03 Data We Collect

SL888 collects personal data across multiple categories. The specific data collected depends on how you interact with our Platform. The principal categories are as follows:

SL888 does not intentionally collect special categories of sensitive personal data (such as health, racial, or political data) unless specifically required for responsible gambling compliance purposes, and only with appropriate safeguards in place.

04 How We Collect Data

We collect personal data through the following primary channels:

• Direct Provision: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to a survey.
• Automated Technical Collection: Data collected automatically when you access the Platform — including IP address, cookie identifiers, device fingerprinting, and browsing session data — via server logs and analytics tools.
• Payment Processors: Transaction references and status confirmations received from Malaysian payment partners including DuitNow, FPX, and e-wallet providers, solely for the purpose of processing and verifying your payments.
• Third-Party Verification Services: Identity and fraud screening data received from KYC and AML service providers used to verify your identity and screen against sanctions lists.
• Publicly Available Sources: In limited circumstances, publicly available data may be reviewed for fraud prevention or compliance purposes.

05 Data Processing & Use

SL888 processes your personal data only for specific, legitimate purposes. The following table sets out the principal purposes for which we process your data and the corresponding category of data used:

• Account Creation and Management: Processing identity, contact, and KYC data to register, verify, and administer your SL888 member account.
• Payment Processing: Using financial and transaction data to process deposits via Malaysian payment channels (Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, BTC, ETH, USDT) and to process withdrawal requests.
• Regulatory Compliance: Processing identity and transaction data to satisfy KYC, AML, and age verification obligations — including confirming that all Members are aged 21 or above.
• Platform Delivery: Using technical and usage data to deliver, maintain, and improve the Platform, including optimising load times, fixing bugs, and ensuring game integrity.
• Customer Support: Processing communications data and account information to respond to support queries, resolve disputes, and handle complaints.
• Fraud Prevention and Security: Analysing transaction patterns, technical data, and usage data to detect suspicious activity, prevent money laundering, and protect the integrity of the Platform.
• Responsible Gambling Monitoring: Reviewing gaming behaviour data to identify patterns that may indicate problem gambling and to action self-exclusion or limit requests in accordance with our responsible gambling obligations.
• Service Communications: Sending account-related notifications (transaction confirmations, security alerts, policy updates) via email or in-platform notifications. This is distinct from marketing communications, which require separate consent.

06 Legal Basis for Processing

SL888 processes personal data under one or more of the following legal bases, as appropriate to the specific processing activity:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you as a registered Member, including account administration, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable law, including KYC verification, AML monitoring, and age verification (21+).
• Legitimate Interests: Processing for purposes of fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: For optional processing activities — such as sending marketing communications or using non-essential cookies — we will seek your explicit consent before doing so. You may withdraw consent at any time without affecting the lawfulness of prior processing.

07 Data Sharing & Disclosure

SL888 may share your personal data with the following categories of recipients, strictly for the purposes described and subject to appropriate data protection safeguards:

• Payment Service Providers: Malaysian e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), banks (Maybank, CIMB, Public Bank, Hong Leong, RHB), and payment networks (DuitNow, FPX), solely for the purpose of processing your financial transactions.
• KYC and Compliance Vendors: Third-party identity verification and AML screening service providers engaged to assist us in meeting our regulatory obligations.
• Game Content Providers: Game studios and content suppliers who power games on the Platform may receive anonymised or pseudonymised session data necessary for game integrity purposes. They do not receive your full identity data.
• Technology Infrastructure Providers: Cloud hosting, cybersecurity, and platform infrastructure vendors who process data on our behalf under strict data processing agreements.
• Regulatory Authorities: Where required by applicable law or legal process, we may disclose personal data to law enforcement, regulatory bodies, or other authorities. We will notify you of any such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction, subject to the same data protection standards described in this Policy.

08 Data Retention

SL888 retains personal data only for as long as necessary to fulfil the purpose for which it was collected and to comply with applicable legal obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of your membership plus any applicable statutory or regulatory minimum retention period.
• KYC and Identity Documents: Retained for a minimum period required under applicable AML regulations from the date of last transaction or account closure, whichever is later.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years to satisfy financial record-keeping obligations.
• Support Communications: Chat transcripts and email records are retained for up to three (3) years from the date of the communication.
• Technical and Usage Data: Retained in aggregated or pseudonymised form for up to two (2) years for analytics and platform improvement purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised in accordance with our data disposal procedures.

09 Cookies & Tracking Technologies

SL888 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored on your device by your browser. We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function correctly — including maintaining your login session, processing transactions, and applying security controls. These cannot be disabled without rendering the Platform non-functional.
• Functional Cookies: Used to remember your preferences — such as language settings, display preferences, and previously selected game categories — to personalise your experience.
• Analytics Cookies: Used to collect anonymised data about how Members use the Platform, including pages visited, session duration, and navigation paths, to support platform improvements.
• Fraud Prevention Cookies: Used to detect and prevent fraudulent activity, identify suspicious login patterns, and protect the integrity of financial transactions.

You may manage cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality. Strictly necessary cookies are exempt from consent requirements as they are essential to service delivery.

10 Data Security

SL888 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage of all sensitive personal and financial data at rest.
• Two-factor authentication (2FA) options for Member accounts.
• Access controls ensuring that internal staff can access personal data only on a need-to-know basis.
• Regular independent security audits and penetration testing of our Platform infrastructure.
• Incident response procedures to detect, investigate, and respond to data security incidents promptly.

While we take every reasonable precaution, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights or interests, we will notify affected Members as required under applicable data protection law.

11 Your Rights

As a data subject, you have the following rights in relation to your personal data held by SL888. To exercise any of these rights, please contact our support team as described in Section 15.

We will respond to all valid data subject requests within thirty (30) days. Where requests are complex or numerous, this period may be extended by a further two months, with prior notification provided to you. Requests may be subject to identity verification before we action them.

12 Minors & Age Restriction

SL888 does not knowingly collect or process personal data from individuals under the age of 21. Our Platform is strictly for use by persons aged 21 and above. Age verification is a mandatory step in our account registration and KYC process.

If we become aware that personal data has been collected from an individual under the age of 21 without parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on our Platform, please notify us immediately via our support channels.

13 Third-Party Links

The SL888 Platform may contain references to or integrations with third-party services, including payment processors and game content providers. This Privacy Policy applies solely to data processing conducted by SL888. SL888 is not responsible for the privacy practices of any third party whose services are accessed in connection with the Platform.

We encourage you to review the privacy policies of any third-party service providers before sharing your personal data with them. SL888 will not direct you to third-party sites for purposes unrelated to our Platform services.

14 Policy Changes

SL888 reserves the right to update, amend, or replace this Privacy Policy at any time. Where changes are material — such as a change in the categories of data collected, a new sharing arrangement, or a change in legal basis — we will notify affected Members via email and/or by prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this page reflects the most recent revision. We recommend that you review this Policy periodically to remain informed of how your personal data is handled. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our Data Protection team using the details below. We are committed to responding to all privacy-related enquiries promptly and in good faith.

For responsible gambling concerns, including self-exclusion requests and account limit adjustments, please visit our Responsible Gambling page or contact live support directly. All such requests are handled as urgent.