Privacy Policy — slot8

This Privacy Policy ("Policy") describes how slot8 ("we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "Player") who access or use the slot8 online gaming platform at https://slot8.vu (the "Platform").

This Policy applies to all personal data processed in connection with your use of the Platform, including data collected during registration, account verification, deposits and withdrawals, gameplay, customer support interactions, and marketing communications. It applies regardless of whether you access the Platform via a desktop browser or a mobile device.

By creating a slot8 account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

slot8 acts as the data controller in respect of the personal data collected and processed through the Platform. As data controller, slot8 determines the purposes for which and the means by which your personal data is processed.

For all privacy-related inquiries, requests, or complaints, you may contact the slot8 Data Protection team directly using the contact details set out in Clause 14 of this Policy. We are committed to responding to all formal privacy requests within 30 calendar days of receipt.

slot8 collects the following categories of personal data:

slot8 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond government ID verification for KYC purposes), or health data, unless you voluntarily disclose such information in the context of a responsible gaming self-assessment or support request.

slot8 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account via the slot8 Login page, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
• Automated technologies: Data collected automatically when you access the Platform, including IP address, device identifiers, browser data, and behavioral session data collected via cookies, server logs, and similar tracking technologies (see Clause 7).
• Third-party partners: Data received from our payment processing partners (e.g., confirmation of IDR transactions via BCA, BRI, OVO, DANA), KYC identity verification providers, and fraud-prevention services. This data is used solely to verify your identity and complete financial transactions securely.
• Publicly available sources: In limited circumstances related to fraud investigation or responsible gaming compliance, slot8 may cross-reference data against publicly available records or databases.

slot8 processes your personal data only where a legitimate purpose and lawful basis exists. The table below summarizes our primary processing activities:

Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal. To withdraw marketing consent, update your notification preferences in your account settings or contact [email protected].

slot8 does not sell, rent, or trade your personal data to any third party. We share data only in the following limited and controlled circumstances:

• Payment processors: Financial data is shared with Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) solely to process your deposit and withdrawal transactions in IDR. These partners process data under their own privacy policies and are contractually bound to keep your data secure.
• KYC & identity verification providers: Identity data (name, date of birth, ID document details) is shared with licensed third-party KYC verification services to confirm your age (21+) and identity as required by our responsible gaming obligations.
• Fraud prevention & security services: Technical and financial data may be shared with anti-fraud and cybersecurity partners to detect and prevent unauthorized account access, money laundering, or bonus abuse.
• Game content providers: Gameplay session data (game ID, bet amount, outcome, timestamp) is shared in anonymized or pseudonymized form with our licensed game studio partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — for technical dispute resolution purposes only.
• Legal authorities: slot8 will disclose personal data to competent legal authorities, courts, or regulators if required to do so by applicable law, court order, or regulatory directive, or where disclosure is necessary to protect the rights, property, or safety of slot8, its members, or the public.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of substantially all of slot8's assets, your personal data may be transferred to the acquiring entity, which will be required to honor this Policy or provide advance notice of any material changes.

All third parties with whom slot8 shares personal data are required to implement appropriate technical and organizational security measures and are prohibited from using your data for any purpose beyond the specific function for which it was shared.

slot8 uses cookies and similar tracking technologies (web beacons, pixel tags, local storage) to operate the Platform effectively, maintain your authenticated session, remember your preferences, and analyze usage patterns. The following cookie categories are in use:

• Strictly Necessary Cookies: Essential for core Platform functionality including user authentication, session management, and security token verification. These cookies cannot be disabled without preventing use of the Platform.
• Functional Cookies: Store your preferences such as language settings, display options, and last-visited game category so that the Platform can provide a more personalized experience on return visits.
• Analytics Cookies: Collect aggregated, anonymized data about how members navigate and interact with the Platform (pages visited, session duration, feature usage). This data is used solely to improve Platform performance and user experience.
• Marketing Cookies: Used only where you have given explicit consent to receive personalized promotions. These cookies track gameplay and navigation behavior to enable relevant bonus and promotional communications.

You may manage cookie preferences through your browser settings at any time. Disabling functional or analytics cookies may affect some features of the Platform but will not prevent access. Disabling strictly necessary cookies will impair your ability to use the Platform. slot8 does not use third-party advertising networks or serve behavioral advertising to external platforms.

slot8 implements a comprehensive set of technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in transit: All data exchanged between your browser and slot8's servers is encrypted using TLS 1.3 with 256-bit AES encryption.
• Encryption at rest: Sensitive personal data — including identity documents and financial account details — is encrypted in slot8's databases using AES-256.
• Password hashing: Account passwords are never stored in plain text. All passwords are hashed using a modern, salted cryptographic hashing algorithm (bcrypt / Argon2) before storage.
• Access controls: Access to production systems containing personal data is restricted to authorized personnel only, using multi-factor authentication (MFA) and role-based access controls (RBAC).
• Security monitoring: slot8 operates 24/7 security monitoring, including intrusion detection systems (IDS), automated anomaly alerts, and regular penetration testing by qualified security professionals.
• Incident response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, slot8 will notify affected players promptly and take all reasonable steps to contain and remediate the breach.

slot8 retains personal data for as long as it is necessary to fulfil the purposes described in this Policy, to maintain your active account, and to comply with applicable legal obligations. The following general retention guidelines apply:

• Active accounts: Personal data associated with an active slot8 account is retained for the duration of the account's active status.
• Closed accounts: Following account closure, identity data, KYC documentation, and transaction records are retained for a minimum of 5 years to comply with anti-money laundering (AML) and financial record-keeping obligations.
• Support communications: Customer support transcripts and correspondence are retained for 2 years from the date of the last interaction.
• Marketing data: If you withdraw consent for marketing communications, your marketing preference record (opt-out flag) is retained indefinitely to ensure we do not inadvertently contact you again. All other marketing-specific data is deleted within 90 days of opt-out.
• Technical / log data: Server log data and anonymized analytics data are retained for up to 12 months for security and performance analysis purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized such that it can no longer be linked to any identifiable individual.

As a slot8 member, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and respond fully within 30 calendar days.

• Right of access: You have the right to request a copy of all personal data held about you by slot8, along with information about how it is processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. For account-level data, many corrections can be made directly within your account settings panel.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been processed unlawfully. This right is subject to our legal retention obligations (see Clause 9).
• Right to restrict processing: You may request that we restrict the processing of your personal data in certain circumstances, for example while a rectification request is under review.
• Right to data portability: You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request that we transmit it directly to another controller where technically feasible.
• Right to object: You have the right to object to processing of your personal data based on legitimate interests, including profiling for marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

slot8 will not charge a fee for handling data rights requests unless they are manifestly unfounded or excessive. In such cases, a reasonable administrative fee may apply and you will be informed in advance.

If slot8 discovers or is notified that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete all data collected from that individual, and, where applicable, void any associated transactions. If you believe that a minor may have accessed or registered on the Platform, please contact us immediately at [email protected].

Parents and guardians are encouraged to use device-level parental control software to restrict access to online gambling platforms. slot8 recommends consulting with your internet service provider or device manufacturer for available parental control options.

slot8 operates as an international online gaming platform. Your personal data may be transferred to, processed in, and stored in countries outside Indonesia, including the jurisdiction in which slot8's licensed servers and infrastructure are hosted. Such transfers are necessary to provide the Services and are carried out in accordance with the following safeguards:

• Data transfers to third-party payment processors and KYC partners occur only where those partners have implemented appropriate data protection measures and are contractually bound by data processing agreements consistent with internationally recognized privacy standards.
• Where personal data is transferred internationally for game dispute resolution purposes (e.g., to game studio partners Pragmatic Play, Evolution Gaming, etc.), only the minimum necessary pseudonymized gameplay data is transferred.
• slot8 does not transfer personal data to jurisdictions that lack adequate data protection frameworks without implementing additional contractual safeguards.

By using the slot8 Platform, you acknowledge and consent to the international transfer of your personal data as described in this clause, subject always to the security measures and protections described in Clause 8.

slot8 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will update the "Last updated" date at the top of this page and, where the changes are significant, notify active members by email or via an in-platform notification.

We encourage you to review this Policy periodically to stay informed about how we are protecting your information. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with a revised Policy, you must cease using the Platform and contact us to close your account.

For all privacy-related inquiries, data rights requests, or concerns regarding this Policy, please contact slot8 using the details below. All privacy communications must be submitted in English.

For general platform questions unrelated to privacy, please visit our FAQ page. For responsible gaming support or self-exclusion requests, please visit our Responsible Gaming page or contact support directly — our Indonesian-speaking team is available 24 hours a day, 7 days a week.