Privacy Policy DMCSlot — Member Personal Data Protection

This Privacy Policy is published by dmcslot and applies to all individuals who access or use our platform at dmcslot.onl, including registered members, unregistered visitors, and any party interacting with our services through any device or method of access.

This document is intended to provide a clear and transparent overview of how dmcslot handles your personal data — from the point of first collection through to deletion. We believe every user has the right to know exactly what happens to their information, and we are committed to upholding that trust.

This Privacy Policy should be read together with the Terms and Conditions dmcslot. In the event of any conflict between the two documents regarding data protection, this Privacy Policy shall take precedence.

Dmcslot collects various categories of personal data from members to ensure the services we offer run smoothly, securely, and in compliance with legal requirements. The data collected can be grouped into several main categories:

For members undergoing identity verification (KYC), dmcslot may also collect digital copies of identity documents such as a national ID or passport, as well as proof of current residence. These documents are stored in an encrypted environment and are accessible only by authorized personnel.

Every piece of data collected by DMCSlot has a specific and legitimate purpose. We do not collect data beyond what is required for the following purposes:

• Account Management: Creating and maintaining member accounts, including the login process, identity verification, and profile management.
• Financial Transaction Processing: Verifying and securely processing deposits and withdrawals through supported payment channels including DuitNow, FPX, and e-wallets.
• Legal Compliance: Fulfilling obligations under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act (AMLA) and related regulations applicable in Malaysia.
• Platform Security: Detecting and preventing fraud, multi-account usage, and any suspicious activity or violations of the platform's Terms and Conditions.
• Service Improvement: Analysing aggregate and anonymised usage patterns to improve platform design, game selection, and overall user experience.
• Service Communications: Sending important notifications about your account, terms updates, policy changes, and security alerts relevant to your account.
• Customer Support: Resolving member enquiries, complaints, and technical issues more efficiently and effectively.
• Responsible Gaming Program: Monitoring gameplay patterns to identify members who may need assistance or intervention in context Responsible Gaming.

Dmcslot understands that member privacy is a trust that must not be taken lightly. We do not share your personal data with third parties except in the following situations, each of which has a clear and legitimate basis:

• Technical Service Providers: Companies that assist in operating our platform infrastructure — such as server hosting providers, payment processors, and gaming software providers — may have limited access to data strictly necessary for carrying out their service functions. All such providers are bound by strict confidentiality agreements.
• Legal Obligation: When required by Malaysian law or directives from legitimate authorities such as Bank Negara Malaysia, the Royal Malaysia Police, or a court of competent jurisdiction, dmcslot will disclose the required data after completing the appropriate verification process.
• Fraud Prevention: In cases involving suspected fraudulent activity, dmcslot may share relevant information with recognized investigative bodies or other platforms for the purpose of detecting and preventing financial crime.
• Business Transfer: In the event that DMCSlot undergoes any merger, acquisition, or business asset transfer, member data may be transferred to the successor entity — however, this Privacy Policy will continue to apply and members will be notified in advance.

In all of the above data-sharing situations, dmcslot ensures that the data shared is the minimum necessary (data minimization principle) and that recipients are bound by data protection obligations equivalent to our own standards.

Dmcslot continuously invests in robust security infrastructure to protect members' personal data from unauthorized access, data breaches, alteration, or destruction. Key security measures we have implemented include:

• Data Transmission Encryption: All communications between your device and DMCSlot's servers are secured with TLS 1.3 protocol and 256-bit SSL encryption, ensuring data cannot be intercepted in transit.
• Data Storage Encryption: Sensitive data stored in dmcslot's databases, including financial information and KYC documents, is encrypted using the AES-256 standard — one of the strongest encryption algorithms currently available.
• Layered Access Control: Only staff with a legitimate operational need are granted access to members' personal data, and every access is automatically logged and monitored.
• Two-Factor Authentication (2FA): dmcslot requires 2FA for all financial transactions and offers optional 2FA for login to provide a higher level of account protection.
• 24/7 Monitoring: An automated threat detection system monitors platform activity around the clock to identify and respond to any intrusion attempts or security anomalies.
• Penetration Testing: The dmcslot platform undergoes comprehensive security testing on a regular basis by independent cybersecurity experts to identify and address any vulnerabilities.

Dmcslot uses cookies and similar tracking technologies to ensure the platform operates at its best and to deliver a better, more personalized user experience. Cookies are small text files stored in your web browser when you visit our website.

The types of cookies used by dmcslot are as follows:

• Essential Cookies: Required for core platform functions such as login session authentication and security. These cookies cannot be disabled without affecting the overall functionality of the platform.
• Performance Cookies: Collecting anonymised information about how members use the platform — such as most-visited pages and response times — to help us improve platform performance.
• Functional Cookies: Saving your preferences such as language, display settings, and game choices so you do not need to reconfigure them each time you log in.
• Analytics Cookies: Helping us understand aggregate platform usage patterns to plan product improvements and content more relevant to Malaysia users.

You can control and manage cookie settings through your web browser's settings menu. However, disabling certain cookies may affect the functionality and user experience of the dmcslot platform. For more information on how to manage cookies in common web browsers, please refer to the support documentation of the browser you are using.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and dmcslot's internal policies, you as a member have the following rights regarding your personal data:

To exercise any of the above rights, please contact the DMCSlot data protection team via the in-platform live chat. We will process your request within 14 working days from the date the request is received. Some requests may require additional identity verification before processing to ensure the security of your data.

Dmcslot retains members' personal data only for as long as necessary to fulfil the original purpose of collection or to meet applicable legal obligations. This storage minimization principle is central to our data management policy.

• Active Account Data: Retained for the duration your account is active and for a minimum of 5 years after account closure, in line with applicable financial and anti-money laundering legal requirements in Malaysia.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in line with Malaysia's accounting and tax legal requirements.
• Support Communication Logs: Retained for 2 years from the date of last interaction for reference and dispute resolution purposes.
• Technical Data & System Logs: Retained for a maximum of 12 months unless required for an active security investigation.
• KYC Documents: Retained for the duration of active membership and 5 years after account termination, in line with AMLA compliance requirements.

Upon expiry of the defined retention period, your personal data will be securely deleted or permanently anonymised from all DMCSlot systems.

Dmcslot reserves the right to modify this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or platform service improvements. Any material amendments will be communicated to members via:

• Clear in-platform notifications on dmcslot during login.
• Email to the address registered with your account.
• Update the "Last Updated" date at the top of this document.

Continued use of the dmcslot platform after any Privacy Policy changes take effect constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how we protect your information.

If you have any questions, concerns, or complaints regarding how DMCSlot handles your personal data, or if you wish to exercise any of your privacy rights, you may contact our Data Protection Officer (DPO) team through the following channels:

• Live Chat: Our primary support channel is available 24/7 via the live chat button within the DMCSlot platform.
• Email: [email protected] — response within 1–3 business days.

When submitting a data privacy inquiry, please include your account username and a brief description of your inquiry or request so we can process it more quickly and accurately.

If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia Department of Personal Data Protection operating under the Ministry of Communications and Multimedia Malaysia.