Privacy Policy
At indoslot88, we treat the protection of your personal data with the same seriousness we bring to platform security and responsible gambling. This Privacy Policy explains exactly what information we collect, why we collect it, how we use it, and the rights you hold over your data as a player on our platform.
No Data Sold to Third Parties
indoslot88 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your information is used exclusively for operating your account and fulfilling our legal obligations.
256-Bit SSL Encryption
All data transmitted between your device and our servers is protected using 256-bit SSL encryption. Sensitive data at rest — including payment information and identity documents — is stored on encrypted servers with restricted access controls.
You Control Your Data
Under this policy, you hold the right to access, correct, restrict, or request deletion of your personal data. Requests may be submitted to our support team and will be addressed within 30 calendar days of receipt.
Minimal Data Collection Principle
We collect only the personal data that is genuinely necessary to operate your account, verify your identity, process your transactions, and comply with applicable anti-money laundering and responsible gambling regulations. We do not collect data beyond what these purposes require.
Payment Data Handled Securely
Payment data — including details related to Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, DuitNow, FPX, and USDT transactions — is processed through secured payment gateways. indoslot88 does not store full card or account numbers on its own servers.
Introduction
This Privacy Policy ("Policy") describes how indoslot88 ("Company", "we", "us", "our"), the operator of the online gaming platform accessible at https://indoslot88.cam ("the Website" or "the Platform"), collects, processes, stores, uses, and discloses personal data provided by or collected from individuals ("you", "Player", "User") who register for an account, access the Platform, or interact with any service offered by indoslot88.
indoslot88 is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy has been drafted with Malaysian players as its primary audience and reflects the standards expected of a trusted online gaming platform serving players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond.
By registering an account or continuing to use the Platform after being presented with this Policy, you acknowledge that you have read and understood how your personal data will be handled. If you do not agree with the practices described in this Policy, you should not register for an account or continue to use the Platform.
This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference.
indoslot88 will never contact you by phone or email to ask for your full password. If you receive any such communication, please report it to our support team immediately — it does not originate from us.
Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings assigned to them below:
- "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, either alone or in combination with other data. This includes, without limitation, name, contact details, payment information, device identifiers, and behavioural data.
- "Processing" means any operation performed on Personal Data, whether by automated means or otherwise, including collection, recording, organisation, storage, alteration, retrieval, use, disclosure, restriction, erasure, or destruction.
- "Data Controller" means the entity that determines the purposes and means of Processing Personal Data. For the purposes of this Policy, the Data Controller is indoslot88.
- "Data Processor" means any third party that processes Personal Data on behalf of the Data Controller under written instruction, such as our payment gateway providers and identity verification service partners.
- "Sensitive Personal Data" means a sub-category of Personal Data that warrants a higher level of protection, including data relating to a person's identity document details, financial account information, and any data that could lead to discrimination or harm if disclosed.
- "Cookies" means small text files placed on your device by the Platform to store information about your session, preferences, and usage behaviour.
- "KYC" means Know Your Customer — the regulatory obligation to verify the identity, age, and residential status of registered players.
Categories of Personal Data We Collect
indoslot88 collects Personal Data across several categories, each justified by a specific operational or legal purpose. The categories of data we collect, and examples of the specific data types within each category, are set out below.
| Data Category | Examples of Data Collected | Primary Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (MyKad / passport) | Account registration, KYC age and identity verification |
| Contact Data | Email address, mobile phone number, residential address (city, state, postcode) | Account communications, support, security alerts |
| Financial Data | Payment method type, transaction amounts in MYR, deposit and withdrawal history, e-wallet account identifiers (TNG, Boost, GrabPay), bank account name | Payment processing, AML compliance, withdrawal verification |
| Technical Data | IP address, device type and model, browser type and version, operating system, session timestamps, geolocation data | Security monitoring, fraud prevention, platform optimisation |
| Usage & Gaming Data | Games played, wager amounts, session duration, bonus redemption history, win/loss records | Responsible gambling monitoring, personalisation, bonus eligibility |
| Communications Data | Live chat transcripts, support email content, complaint records, feedback submissions | Customer service delivery, dispute resolution, quality assurance |
| KYC Document Data | Scanned or photographed copies of identity documents, proof of address documents, selfie verification images | Age and identity verification, AML compliance |
We do not collect data relating to racial or ethnic origin, religious or philosophical beliefs, trade union membership, biometric data (beyond identity document photographs submitted for KYC), or health data, except where a player voluntarily discloses such information in the context of a responsible gambling self-exclusion request.
How We Collect Personal Data
indoslot88 collects Personal Data through the following channels and mechanisms:
4.1 Direct Collection
The majority of the Personal Data we hold is provided directly by you when you: (a) create a player account by completing the registration form; (b) complete the KYC verification process by uploading identity or address documents; (c) make a deposit or initiate a withdrawal; (d) contact our support team via live chat, WhatsApp, WeChat, or email; (e) respond to a survey or provide feedback; or (f) claim a bonus or participate in a promotion.
4.2 Automated Collection
Certain Technical Data and Usage Data is collected automatically when you access or use the Platform. This includes information gathered through cookies, session tracking technologies, server logs, and similar tools that record your interaction with the Platform. Please refer to Section 8 (Cookies & Tracking) for further detail.
4.3 Third-Party Sources
indoslot88 may receive Personal Data about you from third-party sources in limited circumstances, including: (a) identity verification service providers used to cross-check the accuracy of your KYC submission; (b) payment processors who confirm the outcome of a deposit or withdrawal transaction; and (c) fraud prevention databases used to identify accounts associated with known fraudulent behaviour. Data received from these sources is handled in accordance with this Policy.
Purposes of Data Processing
indoslot88 processes your Personal Data for the following specific purposes:
- Account management: To create, maintain, and administer your player account, including processing your registration, updating your profile information, and managing your account settings;
- Identity and age verification (KYC): To confirm that you are aged 21 or above and are who you say you are, in compliance with anti-money laundering obligations and responsible gambling requirements;
- Payment processing: To facilitate your deposits and withdrawals via approved Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, and USDT (TRC20);
- Customer support: To respond to your enquiries, resolve complaints, and provide assistance through our multilingual support channels;
- Responsible gambling: To monitor your gaming activity for patterns that may indicate problem gambling, to apply self-imposed limits or restrictions you have requested, and to enforce self-exclusion where applicable;
- Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorised access, money laundering, and other illegal or prohibited activities;
- Platform improvement: To analyse usage patterns and player feedback in order to improve the functionality, performance, and content of the Platform;
- Marketing communications: Where you have provided your consent, to send you information about promotions, new games, and platform updates. You may withdraw consent for marketing communications at any time by contacting support;
- Legal and regulatory compliance: To comply with applicable laws, regulations, and requests from competent authorities, including maintaining transaction records in accordance with anti-money laundering legislation.
Legal Bases for Processing
indoslot88 processes Personal Data on one or more of the following legal bases, as applicable to each specific processing activity:
6.1 Contractual Necessity
The majority of our core data processing activities — including account creation, KYC verification, payment processing, and customer support — are necessary for the performance of the contract between you and indoslot88 as set out in the Terms & Conditions. Without this processing, we cannot provide the services you have requested.
6.2 Legal Obligation
Certain processing activities are required in order for indoslot88 to comply with its legal obligations, including but not limited to: anti-money laundering record-keeping requirements; identity verification obligations; age verification requirements; and responding to lawful requests from regulatory or law enforcement authorities.
6.3 Legitimate Interests
Where not overridden by your privacy rights and interests, indoslot88 processes some Personal Data on the basis of its legitimate interests as an online gaming operator. This includes fraud detection and prevention, platform security monitoring, responsible gambling analysis, and improving the quality of our products and services. We conduct a balancing assessment to ensure that our legitimate interests do not unduly override your rights.
6.4 Consent
Where we send you direct marketing communications by email or other channels, we do so on the basis of your consent, which you may withdraw at any time without affecting the lawfulness of processing carried out prior to withdrawal. Consent is also the basis for the placement of non-essential cookies on your device.
Data Sharing & Third-Party Disclosure
indoslot88 does not sell, rent, or trade your Personal Data. We may share your data with third parties only in the specific circumstances described below:
7.1 Payment Service Providers
We share necessary transaction data with the payment processors that facilitate your deposits and withdrawals. Each payment provider operates under its own privacy policy and data protection obligations. We share only the minimum data required to process each transaction (for example, your registered name and payment reference). This applies to all approved payment methods including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, and USDT gateway processors.
7.2 Identity Verification Partners
To complete your KYC verification, we may share your identity and address documents with third-party identity verification service providers who cross-reference your submission against public and proprietary databases. These providers are contractually bound to process your data solely for the purposes of verification and to maintain appropriate security standards.
7.3 IT Infrastructure and Platform Providers
Like all digital platforms, indoslot88 relies on third-party cloud hosting, content delivery, and software service providers. These providers may process Personal Data in the course of delivering their services to us and operate as Data Processors under written agreements that bind them to maintain confidentiality and implement adequate security measures.
7.4 Legal and Regulatory Disclosure
indoslot88 may be required to disclose Personal Data to competent authorities, including law enforcement agencies, financial intelligence units, or regulatory bodies, where we are legally obligated to do so. We will notify you of any such disclosure where we are legally permitted to do so.
7.5 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of assets involving indoslot88, Personal Data held by the Company may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and the applicable privacy terms will be updated accordingly.
At no point will indoslot88 share your Personal Data with third-party advertisers, marketing data brokers, or unaffiliated companies for their own commercial purposes. Your data is yours.
Cookies & Tracking Technologies
indoslot88 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain your session state, and gather analytics information that helps us improve our services.
8.1 Types of Cookies Used
- Essential cookies: Required for the Platform to function correctly. These include session cookies that maintain your login state and security tokens that protect against cross-site request forgery. These cannot be disabled without compromising your ability to use the Platform.
- Functional cookies: Remember your preferences such as language selection, display settings, and previously used payment methods to streamline your experience on return visits.
- Analytics cookies: Collect aggregated and anonymised data about how players use the Platform — which pages are visited most frequently, where users encounter errors, and how different features perform. This data is used solely to improve the Platform.
- Security cookies: Used to detect and prevent fraud, identify unusual login patterns, and monitor for suspicious account activity.
8.2 Managing Cookies
You may control and manage cookies through your browser settings. Most modern browsers allow you to refuse non-essential cookies, delete existing cookies, or receive notification when a cookie is being placed. Please note that disabling certain cookies may affect the functionality of the Platform. Detailed instructions for managing cookies in common browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation.
8.3 Do Not Track
Some browsers support a "Do Not Track" (DNT) signal. indoslot88 currently does not alter its data collection practices in response to DNT signals, as there is no universally accepted standard for how platforms should respond to such requests. We will review this position as standards develop.
Data Retention
indoslot88 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, and in any event for no longer than required by applicable law. The specific retention periods we apply are as follows:
| Data Category | Retention Period | Justification |
|---|---|---|
| Account and identity data | Duration of account + 5 years post-closure | AML regulatory requirements and dispute resolution |
| Financial transaction records | 7 years from transaction date | Financial crime legislation and tax record obligations |
| KYC documents | Duration of account + 5 years post-closure | AML and identity verification compliance |
| Customer support communications | 3 years from last contact | Dispute resolution and quality assurance |
| Gaming activity and session data | Duration of account + 2 years post-closure | Responsible gambling monitoring and audit |
| Marketing consent records | Until consent is withdrawn + 2 years | Evidence of lawful marketing basis |
| Technical and device data | 12 months from collection | Security monitoring and fraud analysis |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Anonymised or aggregated data may be retained indefinitely for statistical and research purposes.
Data Security
indoslot88 implements a layered approach to data security, combining technical controls, procedural safeguards, and staff training to protect your Personal Data against unauthorised access, loss, alteration, or disclosure.
10.1 Technical Measures
Our technical security infrastructure includes: 256-bit SSL/TLS encryption for all data in transit between your device and our servers; AES-256 encryption for sensitive data stored at rest; firewalls and intrusion detection systems at network perimeter and application layer; multi-factor authentication requirements for administrative access to data systems; and regular penetration testing conducted by independent security specialists.
10.2 Organisational Measures
Access to Personal Data within indoslot88 is governed by a principle of least privilege — staff members are granted access only to the data they need to perform their specific role. All personnel who handle Personal Data receive regular data protection training. Contracts with third-party Data Processors include binding data security obligations.
10.3 Breach Response
In the event of a Personal Data breach that poses a risk to the rights and freedoms of affected players, indoslot88 will notify affected players without undue delay and will take immediate steps to contain and remediate the breach. A breach notification will describe the nature of the incident, the data categories affected, the likely consequences, and the steps taken to address the situation.
10.4 Your Responsibility
While indoslot88 takes extensive steps to protect your data, the security of your account also depends on the steps you take to protect your login credentials. You must use a strong, unique password for your indoslot88 account and must not share your credentials with any other person. If you suspect your account has been compromised, you must notify our support team immediately.
Your Data Rights
As a player whose Personal Data is processed by indoslot88, you hold a number of rights in relation to that data. These rights are set out below, along with guidance on how to exercise them.
To exercise any of the rights listed below, please contact our support team at [email protected] (plain text — not a clickable link), clearly identifying your account and the specific right you wish to exercise. We will acknowledge your request within 5 business days and respond substantively within 30 calendar days. Complex requests may require an extension of up to a further 30 days, in which case you will be notified.
What You Can Ask Us to Do
These rights apply to all Personal Data indoslot88 holds about you. To exercise any right, contact our support team — we respond within 30 calendar days.
Right of Access
You may request a copy of the Personal Data indoslot88 holds about you, together with information about how it is being processed, the categories of data held, and the third parties with whom it has been shared. This is known as a Subject Access Request (SAR).
Right to Rectification
If any of the Personal Data we hold about you is inaccurate, incomplete, or out of date, you have the right to request that we correct it. We will update your data promptly upon verification of the correction request.
Right to Erasure
You may request deletion of your Personal Data where: it is no longer necessary for the purpose it was collected; you withdraw consent and there is no other lawful basis; or the data has been processed unlawfully. Note that erasure requests may be limited by legal retention obligations such as AML record-keeping requirements.
Right to Restriction
You may ask us to restrict the processing of your data in certain circumstances — for example, while the accuracy of data is contested, or while an objection to processing based on legitimate interests is being assessed. During a restriction period, we will store your data but not actively process it.
Right to Data Portability
Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that we provide your Personal Data in a structured, commonly used, and machine-readable format so that you can transfer it to another service provider.
Right to Object
You have the right to object to processing of your Personal Data where that processing is based on legitimate interests. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time, after which we will cease all marketing communications.
Children & Minors
indoslot88 is an online gaming platform strictly intended for adults aged 21 years and above. We do not knowingly collect or process Personal Data from individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process — we require all players to confirm their age and to provide identity documentation that corroborates it.
If we discover or have reasonable grounds to believe that we have collected Personal Data from an individual who is under 21 years of age, we will immediately suspend the associated account, investigate the circumstances, and delete all associated Personal Data to the extent permitted by applicable law. Any transactions processed in connection with such an account will be reviewed in accordance with our Terms & Conditions.
Parents and legal guardians who believe that their child or ward may have registered an account on indoslot88 are encouraged to contact our support team immediately at [email protected] (plain text — not a clickable link). We take such concerns seriously and will prioritise any investigation relating to a minor's access to the Platform.
We also recommend that parents and guardians make use of commercially available parental control software tools, which can restrict access to online gambling sites and adult-classified content across all devices in the household.
Amendments to This Privacy Policy
indoslot88 reserves the right to amend, update, or replace this Privacy Policy at any time. We may update this Policy to reflect changes in applicable data protection legislation, changes in our data processing practices, or operational changes to the Platform that affect how we handle Personal Data.
When material changes are made to this Policy — that is, changes that meaningfully affect how we collect, use, share, or protect your Personal Data — we will provide notice to registered players via the email address associated with their account, and we will update the "Last Reviewed" date at the top of this page.
Your continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the changes. If you disagree with any amendment, you may close your account by contacting our support team, and we will return any outstanding Real Money Funds balance in accordance with our Terms & Conditions.
We encourage you to review this Privacy Policy periodically — even in the absence of a formal notification — to remain informed about how your data is handled. The version of this Policy displayed at https://indoslot88.cam/privacy-policy at any given time is the current operative version.
Contact Us — Privacy Enquiries
If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of your data rights as described in Section 11, please contact the indoslot88 support team. All contact details below are presented as plain text and are not clickable links.
Please include "Privacy Enquiry" or "Data Rights Request" in the subject line of your email to ensure it reaches the correct team promptly.
Average response time: 3–5 minutes. For complex data rights requests, please use email to ensure a complete written record is maintained.
This Privacy Policy was last reviewed and updated in January 2026. The effective date of the current version is 1 January 2026.
Play with Confidence at indoslot88
Your personal data is in safe hands. With bank-grade encryption, a strict no-data-sale policy, and full transparency over how your information is used, indoslot88 is built to be a platform you can trust — alongside being Malaysia's most player-focused online casino. For players aged 21 and above only.
Questions about your data? Contact us at [email protected] (plain text — not clickable). For our full legal terms, visit Terms & Conditions.