Privacy Policy sl999 —
Data Protection & Information Security

This Privacy Policy ("Policy") is published by sl999 and applies to all users who register, browse, or use the sl999 platform via its website, mobile app, or any other official sl999 channel. The primary purpose of this document is to clearly and transparently explain how sl999 manages players' personal information from the point of collection through to storage and deletion.

Sl999 takes our responsibility toward your privacy seriously. In today's digital age, data security is not merely a technical requirement — it is a trust you place in us. We take that trust seriously, and every decision we make regarding player data is guided by the principles of transparency, security, and respect for individual rights.

This Policy applies in conjunction with Terms and Conditions sl999 and Responsible Gaming Policy us, all of which together form a comprehensive governance framework for the protection of sl999 players.

Sl999 only collects data that is necessary for clear and legitimate purposes. The following are the categories of information we collect from players:

Sl999 does not collect sensitive data such as health information, religious beliefs, political views, or biometric data beyond standard identity verification requirements.

Every piece of data collected by sl999 has a clear and legitimate purpose. We use players' personal information solely for the following purposes:

• Account Management: Creating, verifying, and maintaining secure player accounts on the sl999 platform.
• Transaction Processing: Verifying and processing deposits, withdrawals, and all other financial transactions within the stipulated timeframe.
• Identity Verification (KYC): Verifying that every player is a legitimate individual, aged 18 and above, and not on any active self-exclusion list.
• Legal Compliance: Fulfilling regulatory obligations including anti-money laundering (AML), counter-terrorism financing, and other statutory reporting requirements.
• Platform Security: Detecting and preventing fraud, unauthorised access, game manipulation, and any activity that violates sl999's Terms and Conditions.
• Service Improvement: Analysing usage patterns in aggregate (without identifying individuals) to improve the gaming experience and platform performance.
• Customer Support: Handling enquiries, complaints, and technical support requests more effectively.
• Marketing Communications: Sending bonus offers, promotions, and platform updates — only to players who have consented to receive such communications.

Sl999 does not sell, rent, or transfer players' personal information to third parties for marketing purposes. However, in the course of platform operations, sl999 may share necessary data with the following parties under limited and controlled circumstances:

• Payment Service Providers: FPX, Touch 'n Go eWallet, GrabPay, Boost, and USDT require only the minimum transaction information necessary to process your deposits and withdrawals.
• Identity Verification Providers: Accredited third-party KYC service providers bound by strict confidentiality agreements.
• Competent Authority: Where required by law, court order, or a legitimate investigation by the relevant authorities.
• Technical Infrastructure Providers: Cloud and computing service providers that operate sl999's servers, subject to strict data processing agreements.
• Game Software Providers: In certain cases, non-identifying game session information may be shared with game providers for technical and audit purposes.

All third parties working with sl999 are required to meet data protection standards equal to or higher than those of sl999 itself. They may only use shared data for purposes that have been specifically agreed upon.

Player data security is sl999's highest priority. We implement multiple layers of protection to ensure your information remains safe at all times:

• 256-bit SSL Encryption: All communications between your device and sl999 servers are encrypted using the latest TLS 1.3 protocol.
• Two-Factor Authentication (2FA): Players are encouraged to activate 2FA for an additional layer of protection on every login.
• Stored Data Encryption: Sensitive information stored in sl999's database is encrypted using AES-256 algorithm.
• Internal Access Controls: Only authorised staff with a specific business need may access player data, with a full audit log maintained.
• Periodic Penetration Testing: sl999 conducts regular security testing by independent cybersecurity experts to identify and address system vulnerabilities.
• Real-Time Monitoring: An automated threat detection system monitors suspicious activity 24/7 and instantly alerts the security team.

While sl999 takes all reasonable steps to protect your data, no system can guarantee 100% absolute security. Players are also responsible for keeping their passwords secure and not sharing their login credentials with anyone.

Sl999 uses cookies and similar tracking technologies to enhance the user experience and analyze platform performance. The types of cookies used by sl999 are as follows:

• Essential Cookies: Required for core platform functions such as login, session tracking, and security. These cookies cannot be disabled.
• Performance Cookies: Collecting aggregate data on how players use the platform to help sl999 identify areas for improvement.
• Functional Cookies: Storing user preferences such as language, display settings, and saved login information.
• Analytics Cookies: sl999 uses internal analytics tools to understand traffic patterns and user behavior for product development purposes.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality of the sl999 platform and your overall gaming experience.

As a sl999 player and owner of your personal data, you have the following rights, which may be exercised at any time:

• Right of Access: You have the right to obtain a copy of all personal data that sl999 holds about you.
• Right to Rectification: If the information we hold is inaccurate or outdated, you have the right to request immediate correction.
• Right to Erasure ("Right to be Forgotten"): Under certain circumstances, you may request that sl999 delete your personal data, subject to applicable legal retention obligations.
• Right to Restrict Processing: You may request that sl999 restrict how your data is processed under certain circumstances provided by law.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for transfer to another service provider.
• Right to Withdraw Consent: If data processing is based on your consent, you may withdraw that consent at any time without affecting the validity of prior processing.

To exercise any of the above rights, please contact the sl999 support team via live chat on the platform or our official email. sl999 will respond to valid requests within 30 business days.

Sl999 retains players' personal data only for as long as necessary for the purposes stated in this Policy, or for as long as required by applicable laws and regulations.

• Active Account Data: Retained for the duration of the player's active account and for 5 years after account closure, for financial records and legal compliance purposes.
• KYC Documents: Retained for a minimum of 5 years after the business relationship ends, as required by anti-money laundering laws.
• Financial Transaction Logs: Retained for 7 years for audit, tax compliance, and potential fraud investigation purposes.
• Support Chat Logs: Retained for 2 years for reference and service quality improvement purposes.
• Aggregate Analytics Data: De-identified data (data that cannot be linked to any individual) may be retained indefinitely for business analytics purposes.

Once the retention period expires or data is no longer needed, sl999 will securely delete or anonymize that data using industry-approved procedures.

Sl999 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or platform developments. Any significant changes will be communicated to players via in-platform notifications or email at least 14 days before the changes take effect.

Players are encouraged to review this Privacy Policy periodically. The "Updated" date at the top of this document will always reflect the latest version in effect. Continued use of the sl999 platform after any changes are published constitutes acceptance of the updated privacy terms.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how sl999 handles your personal data, please do not hesitate to contact us. The sl999 Data Privacy Officer team is ready to assist you.

• Live Chat: The fastest channel — available on the sl999 platform, 24 hours a day, 7 days a week.
• Official Email: Submit your written enquiry to the sl999 privacy team for more formal and documented handling.
• Response Time: sl999 is committed to responding to all privacy-related inquiries within 3 business days, and to data rights requests within 30 business days.