1. Introduction
HantuSlot ("we", "us", "our", "the Operator") operates the online gaming platform accessible at hantuslot.cam (the "Platform"). We are committed to maintaining the privacy and security of the personal information entrusted to us by our players and visitors.
This Privacy Policy ("Policy") describes how HantuSlot collects, processes, stores, discloses, and protects personal data relating to individuals who access or use the Platform ("you", "your", "Player", "User"). This Policy applies to all data collected through the Platform, including during account registration, identity verification, gaming activity, payment processing, customer support interactions, and marketing communications.
By registering an Account on the Platform, completing identity verification, making a deposit, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.
2. Definitions
In this Policy, the following terms carry the meanings set out below:
- "Personal Data" — Any information that directly or indirectly identifies a living individual, including but not limited to name, identification number, contact details, financial data, and device identifiers.
- "Processing" — Any operation performed on Personal Data, whether automated or manual, including collection, recording, storage, adaptation, retrieval, use, disclosure, transfer, or erasure.
- "Data Controller" — HantuSlot, as the entity that determines the purposes and means of processing your Personal Data.
- "Data Processor" — A third party that processes Personal Data on behalf of HantuSlot under a contractual obligation and in accordance with our instructions.
- "KYC Data" — Identity and address verification documents submitted by Players as part of the Know Your Customer process, including government-issued identification and proof of address.
- "Cookies" — Small text files placed on your device by the Platform to enable functionality, improve performance, and support analytics.
- "Sensitive Personal Data" — A subset of Personal Data requiring heightened protection, including data revealing racial or ethnic origin, health information, biometric data, or financial account credentials.
3. Data We Collect
HantuSlot collects the following categories of Personal Data in connection with your use of the Platform:
| Category |
Examples |
Purpose |
| Identity Data |
Full name, date of birth, nationality, government ID number (Malaysian IC / Passport) |
Account creation, KYC verification, age verification |
| Contact Data |
Email address, mobile number, residential address |
Account communications, support, notifications |
| Financial Data |
Payment method details, e-wallet identifiers (Touch 'n Go, GrabPay, Boost), bank account references, transaction history |
Payment processing, withdrawal verification, fraud prevention |
| KYC Documents |
Scanned copies of MyKad, Driver's Licence, Passport, utility bills, bank statements |
Identity and address verification, regulatory compliance |
| Technical Data |
IP address, device type, browser type, operating system, session timestamps |
Platform security, fraud detection, analytics |
| Gaming Activity Data |
Betting history, game participation records, win/loss data, bonus usage |
Account management, responsible gambling monitoring, regulatory reporting |
| Communications Data |
Live chat transcripts, email correspondence, support ticket content |
Customer service quality, dispute resolution |
| Marketing Preferences |
Communication opt-ins/opt-outs, promotional interaction history |
Personalised marketing (with consent) |
Data Minimisation Principle: HantuSlot collects only the Personal Data that is necessary for the purposes described in this Policy. We do not collect sensitive Personal Data beyond what is required for identity verification and regulatory compliance.
4. How We Collect Your Data
We collect Personal Data through the following means:
- Directly from you: When you register an Account, complete KYC verification, make deposits or withdrawals, contact our support team, participate in promotions, or update your account settings.
- Automatically: When you access or use the Platform, we automatically collect Technical Data including your IP address, device identifiers, browser characteristics, and session activity through cookies and similar tracking technologies.
- From third-party payment processors: When you complete a transaction via DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, or GrabPay, we receive confirmation and reference data from these providers to reconcile transactions.
- From identity verification services: We may engage third-party KYC verification providers to cross-reference documents you submit against official databases to confirm their authenticity.
- From fraud prevention and analytics providers: We may receive risk signals, device fingerprint data, or behavioural analytics from third-party security partners to protect the Platform and our players from fraud.
5. Data Processing & Use
HantuSlot processes your Personal Data for the following specific purposes:
- Account Management: To create, maintain, operate, and secure your player account on the Platform, including processing login sessions, managing account settings, and enabling access to games and betting markets.
- Identity Verification (KYC): To verify your identity and age in compliance with our licence obligations and applicable anti-money-laundering (AML) regulations. This includes verifying that you are at least 21 years of age before allowing access to real-money gaming features.
- Payment Processing: To facilitate the deposit of funds into your Account and the withdrawal of winnings via your chosen Malaysian payment method, including e-wallets (Touch 'n Go eWallet, Boost, GrabPay), DuitNow, FPX, and direct bank transfers with Maybank, CIMB, Public Bank, RHB, and Hong Leong.
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multiple account registrations, bonus abuse, and unauthorised account access.
- Responsible Gambling: To monitor gaming activity for signs of problem gambling behaviour, enforce deposit and loss limits you have set, and implement self-exclusion restrictions where requested or where mandated by our responsible gambling obligations.
- Customer Support: To respond to your enquiries, resolve disputes, and provide assistance through our 24/7 live chat and email support channels in English, Bahasa Melayu, and Chinese.
- Legal & Regulatory Compliance: To comply with applicable gaming licensing conditions, AML regulations, tax reporting obligations, and any lawful requests from regulatory or law enforcement authorities.
- Marketing & Promotions: To send you personalised promotional offers, bonus notifications, and platform updates, where you have provided your consent or where we have a legitimate interest in communicating with active players.
- Platform Analytics & Improvement: To analyse how players interact with the Platform, identify technical issues, and continuously improve the user experience, game offerings, and payment reliability.
6. Legal Basis for Processing
HantuSlot processes your Personal Data on the following legal grounds:
- Contractual Necessity: Processing required to perform the contract between you and HantuSlot — including account creation, payment processing, KYC verification, and providing access to games and services.
- Legal Obligation: Processing required to comply with applicable laws, gaming licensing conditions, AML regulations, and obligations to regulatory authorities.
- Legitimate Interests: Processing for fraud prevention, platform security, abuse detection, and analytical purposes where our legitimate business interests are not overridden by your rights and freedoms.
- Consent: Where we rely on your consent — particularly for direct marketing communications — you may withdraw that consent at any time by contacting our support team or updating your marketing preferences in your Account Settings.
7. Data Sharing & Disclosure
HantuSlot does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share your Personal Data only in the following circumstances and with the following categories of recipients:
- Payment Processors: We share transaction-relevant data with Malaysian payment providers (including DuitNow operators, FPX banking partners, and e-wallet providers such as Touch 'n Go, Boost, and GrabPay) to facilitate deposits and withdrawals on your behalf.
- KYC & Identity Verification Providers: We engage specialist third-party KYC services to verify the authenticity of identity documents you submit. These providers process your KYC data strictly under our instruction and pursuant to data processing agreements.
- Game Content Providers: Certain gameplay data may be shared with our licensed game studio partners to enable game functionality, record outcomes, and resolve technical disputes. No personally identifiable information beyond anonymised session identifiers is shared for this purpose.
- Fraud Prevention & Security Partners: We share Technical Data and risk signals with security analytics providers to identify and prevent fraudulent activity on the Platform.
- Regulatory & Law Enforcement Authorities: We may disclose Personal Data to gaming regulatory bodies, financial intelligence units, tax authorities, police, or courts where we are legally required or compelled to do so by applicable law or valid legal process.
- Professional Advisors: We may share Personal Data with our lawyers, auditors, and insurers on a confidential basis where necessary for the provision of professional services.
- Business Transfers: In the event of a merger, acquisition, restructuring, or sale of HantuSlot's business or assets, your Personal Data may be transferred to the successor entity, subject to equivalent privacy protections.
All third-party Data Processors engaged by HantuSlot are subject to contractual data processing agreements that require them to process your Personal Data only as directed by us, implement appropriate security measures, and prohibit any use of your data for their own independent purposes.
8. Data Retention
HantuSlot retains your Personal Data for as long as is necessary to fulfil the purposes described in this Policy and to comply with our legal, regulatory, and contractual obligations. The following general retention periods apply:
- Active Account Data: Retained for the duration of your Account's existence on the Platform.
- KYC Documents: Retained for a minimum of five (5) years following account closure, in compliance with AML record-keeping obligations.
- Transaction Records: Retained for a minimum of five (5) years following each transaction, for financial regulatory and audit purposes.
- Communications & Support Records: Retained for up to three (3) years following the resolution of the relevant enquiry or dispute.
- Marketing Preferences: Retained until you withdraw your consent or request deletion, subject to any mandatory retention periods.
Upon expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised so that it can no longer be attributed to any identifiable individual.
9. Cookies & Tracking Technologies
HantuSlot uses cookies and similar tracking technologies to operate the Platform, improve your experience, and support analytics and security functions. The categories of cookies we use are:
- Strictly Necessary Cookies: Essential for the operation of the Platform, including maintaining your login session, managing security tokens, and enabling core gaming functionality. These cookies cannot be disabled.
- Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how visitors interact with the Platform — including page views, session durations, and navigation patterns — to help us improve platform performance and user experience.
- Functionality Cookies: Used to remember your preferences and settings, such as your chosen language, region, and display options, to provide a more personalised experience across sessions.
- Security Cookies: Used to detect and prevent fraudulent activity, including identifying anomalous login behaviour, multiple account registrations from the same device, and suspicious transaction patterns.
You may adjust your cookie preferences through your browser settings. Please note that disabling cookies may affect the functionality of certain Platform features. As we do not use advertising cookies, disabling analytics cookies will not affect your ability to access or play games on HantuSlot.
10. Data Security
HantuSlot implements a comprehensive set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes:
- 256-bit SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted using industry-standard Transport Layer Security, ensuring that payment credentials, login data, and personal information cannot be intercepted in transit.
- Two-Factor Authentication (2FA): Available to all Players to add an additional layer of authentication security to their account login process.
- Secure Data Storage: Personal Data and KYC documents are stored on encrypted servers in access-controlled data centre environments with strict physical and logical security controls.
- Access Controls: Access to Personal Data within HantuSlot is restricted on a need-to-know basis, with role-based access controls enforced across all internal systems. Staff with access to Personal Data are subject to confidentiality obligations.
- Regular Security Audits: Our platform undergoes periodic penetration testing and security reviews conducted by qualified independent security professionals.
Your Responsibilities: While we take all reasonable steps to protect your data, you also have a role to play. Keep your Account credentials confidential, enable 2FA, avoid using public Wi-Fi for gaming sessions, and contact us immediately if you suspect unauthorised access to your account.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, HantuSlot will notify affected individuals and relevant regulatory authorities in accordance with applicable data protection laws and our licensing obligations.
11. Your Rights
Subject to applicable law and certain limitations arising from our regulatory and legal obligations, you have the following rights in respect of your Personal Data held by HantuSlot:
Right of Access
Request a copy of the Personal Data we hold about you and information about how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete Personal Data held in your Account.
Right to Erasure
Request deletion of your Personal Data where it is no longer necessary, subject to mandatory retention obligations.
Right to Restrict Processing
Request that we limit the processing of your data in certain circumstances, such as while a dispute is being investigated.
Right to Data Portability
Request a machine-readable copy of the data you provided to us, where processing is based on consent or contract.
Right to Object
Object to processing based on legitimate interests, or withdraw consent for direct marketing communications at any time.
To exercise any of these rights, please submit a written request to our support team at the contact details in Section 15. We will acknowledge your request within 5 business days and respond substantively within 30 days. In complex cases, we may extend this period by a further 60 days with prior notification.
Please note that certain rights may be restricted where processing is required for compliance with our gaming licence obligations, AML requirements, or active legal proceedings.
12. Minors & Age Verification
HantuSlot's services are strictly intended for individuals who are 21 years of age or older. We do not knowingly collect Personal Data from persons under 21 years of age.
As part of our KYC process, every player is required to submit a valid government-issued photo identification document confirming their date of birth. Accounts where age verification confirms the holder is under 21 will be immediately suspended, all associated Personal Data will be retained only for the minimum period required by applicable law, and any funds held in the account will be handled in accordance with our regulatory obligations.
If you believe that a person under 21 has created an account on HantuSlot, please contact us immediately so we can investigate and take appropriate action.
13. International Data Transfers
Some of our third-party service providers — including KYC verification partners, fraud prevention platforms, and cloud infrastructure providers — may process your Personal Data in jurisdictions outside Malaysia. When we transfer Personal Data internationally, we take steps to ensure that appropriate safeguards are in place, including:
- Contractual data processing agreements incorporating standard data protection clauses;
- Transfers only to jurisdictions that maintain adequate data protection standards as assessed by applicable regulators; and
- Technical measures to ensure data security throughout the transfer and processing lifecycle.
You may request further details about the safeguards applicable to any specific international transfer by contacting our privacy team using the contact details in Section 15.
14. Changes to This Privacy Policy
HantuSlot reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or business operations.
Material changes to this Policy — particularly changes that expand the categories of data we collect, the purposes for which we process it, or the parties with whom we share it — will be communicated to active Players via notice on the Platform or by email to your registered address, no less than 14 days prior to the changes taking effect.
Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. The effective date at the top of this document indicates when the current version was last reviewed. If you do not agree with any changes, you may request Account closure by contacting our support team.