u2slot Privacy Policy

1. Introduction and Scope

1.1 This Privacy Policy ("Policy") is issued by the operator of the u2slot platform ("u2slot", "we", "us", "our"), accessible at https://u2slot.app. It sets out the basis on which personal data collected from or about you — whether as a registered member, a prospective member, or a visitor to the Platform — will be processed by u2slot.

1.2 This Policy applies to all personal data collected through the u2slot website, mobile browser interface, live chat support system, email correspondence, and any other channel through which you interact with u2slot.

1.3 This Policy should be read in conjunction with u2slot's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. By using the Platform or registering an account, you confirm that you have read and understood this Policy.

1.4 u2slot is committed to processing personal data in accordance with applicable data protection laws, including the Malaysian Personal Data Protection Act 2010 (PDPA) and applicable international standards to the extent they apply to our operations.

2. Data Controller

2.1 For the purposes of applicable data protection legislation, u2slot is the data controller in respect of personal data collected through the Platform.

2.2 Where u2slot engages third-party service providers to process personal data on its behalf (for example, payment processors, game software providers, fraud prevention services), those parties act as data processors under documented contractual obligations that comply with applicable data protection standards.

2.3 All queries relating to data processing, data subject rights requests, and complaints regarding u2slot's privacy practices should be directed to our support team at [email protected] (plain text — not a clickable link).

3. Personal Data We Collect

3.1 Registration and Identity Data

When you create a u2slot account, we collect: full name; date of birth; residential address; email address; mobile telephone number; and, during KYC verification, copies of government-issued photo identification (such as a Malaysian National Identity Card, passport, or driving licence) and proof of address.

3.2 Financial and Payment Data

We collect information necessary to process deposits and withdrawals, including: payment method identifiers (e-wallet account references, last four digits of cards, bank account references); transaction amounts and timestamps; and cryptocurrency wallet addresses where applicable. u2slot does not store full card numbers. Payment card data is handled exclusively by our PCI-DSS compliant payment partners.

3.3 Gameplay and Activity Data

We collect records of games played, wagers placed, wins and losses, session durations, and sportsbook betting history. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting.

3.4 Technical and Device Data

We automatically collect: IP address; device type and operating system; browser type and version; session identifiers; and log data including pages visited and features accessed. This data is used for security monitoring, fraud prevention, and Platform optimisation.

3.5 Communications Data

Records of your communications with u2slot customer support — via live chat, email, or other channels — are retained for quality assurance, dispute resolution, and regulatory compliance purposes.

4. How We Collect Your Data

u2slot collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion.
• Automatically — through cookies, server logs, and analytics tools when you access and navigate the Platform. See Section 9 for further details on cookies.
• From third parties — including identity verification service providers, fraud prevention agencies, payment processors, and (where applicable) publicly available sources used to fulfil our KYC and anti-money laundering obligations.

5. Purposes and Legal Bases for Processing

u2slot processes your personal data for the following purposes and on the following legal bases:

• Account creation and management — necessary for the performance of the contract between you and u2slot (i.e., to provide the Platform services).
• Identity verification and KYC compliance — necessary for compliance with legal obligations under our international gaming licence and applicable anti-money laundering regulations.
• Processing deposits and withdrawals — necessary for the performance of the contract and to fulfil financial regulatory obligations.
• Fraud prevention and security monitoring — necessary for the legitimate interests of u2slot and its members in maintaining Platform security and preventing financial crime.
• Responsible gaming monitoring — necessary for compliance with our licensing obligations, which require us to monitor gameplay for indicators of problem gambling and to enforce self-exclusion arrangements.
• Customer support — necessary for the performance of the contract and for our legitimate interest in maintaining service quality.
• Marketing communications — based on your prior consent (opt-in). You may withdraw consent at any time.
• Platform analytics and improvement — based on our legitimate interest in improving the Platform experience, subject to your cookie preferences.
• Regulatory reporting — necessary for compliance with legal obligations imposed by our licensing authority.

6. Disclosure of Personal Data

6.1 u2slot does not sell, rent, or trade your personal data to any third party for their own marketing purposes.

6.2 We may share your personal data with the following categories of recipients, strictly limited to what is necessary for the stated purpose:

• Payment service providers — including Touch n Go eWallet, Boost, FPX network operators, Visa, Mastercard, and cryptocurrency payment gateways — solely for the purpose of processing transactions.
• Game software providers — who operate game servers and RNG infrastructure under contractual data processing agreements with u2slot.
• Identity verification and fraud prevention services — to fulfil KYC and anti-money laundering obligations.
• Regulatory and licensing authorities — where disclosure is required by our gaming licence conditions or applicable law.
• Law enforcement agencies — where required by a valid legal order or statutory obligation.

6.3 All third-party data processors engaged by u2slot are contractually bound to process personal data solely on u2slot's documented instructions, to implement appropriate technical and organisational security measures, and to delete or return personal data upon termination of the service relationship.

7. International Data Transfers

7.1 The u2slot Platform serves members located in Malaysia. Some of the third-party service providers engaged by u2slot — including game software providers and certain payment processors — operate in jurisdictions outside Malaysia. Where personal data is transferred internationally, u2slot ensures that appropriate safeguards are in place, including standard contractual clauses or transfers to jurisdictions with an adequacy determination from the relevant regulatory authority.

7.2 By using the Platform and accepting this Policy, you acknowledge that your data may be transferred to and processed in countries outside Malaysia. u2slot takes reasonable steps to ensure that such transfers comply with the Malaysian PDPA and applicable international data protection standards.

8. Data Retention

8.1 u2slot retains personal data for as long as your Account is active and for a period thereafter as required by our licensing obligations and applicable law. Under our international gaming licence, transaction records and KYC documentation are typically required to be retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later.

8.2 Gameplay and session data is retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.

8.3 Marketing consent records are retained for as long as necessary to demonstrate compliance with consent requirements, or until you withdraw your consent and we have confirmed its removal from all active marketing systems.

8.4 When personal data is no longer required for any of the purposes described in this Policy and no legal obligation requires its continued retention, u2slot will securely delete or anonymise the data in accordance with our internal data disposal procedures.

9. Cookies and Tracking Technologies

9.1 The u2slot Platform uses the following categories of cookies:

• Strictly necessary cookies — required for the Platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. These cannot be disabled without breaking Platform functionality.
• Functional cookies — used to remember your preferences (such as language settings and preferred game view). These are set only with your consent.
• Analytics cookies — used to collect anonymised aggregate data about how members navigate the Platform, to help us identify areas for improvement. These are set only with your consent.

9.2 u2slot does not use third-party advertising or retargeting cookies. We do not share cookie data with social media platforms or advertising networks.

9.3 You may manage your cookie preferences at any time through your browser settings. Note that blocking all cookies — including strictly necessary cookies — will prevent you from logging in to or using the Platform.

10. Security Measures

10.1 u2slot implements technical and organisational security measures appropriate to the risk profile of the personal data we process. These include:

• 256-bit SSL/TLS encryption for all data in transit between your device and u2slot servers.
• Bcrypt hashing for stored passwords. u2slot staff cannot view your password in cleartext.
• Multi-factor authentication for access to internal administrative systems.
• Automated anomaly detection systems that flag unusual login activity and trigger account alerts.
• Physical and logical access controls restricting personal data access to authorised personnel.
• Regular internal security reviews and vulnerability assessments.

10.2 Notwithstanding the above, no system of data security can be guaranteed to be completely impenetrable. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, u2slot will notify affected members and the relevant regulatory authority in accordance with applicable legal requirements.

11. Your Rights as a Data Subject

Subject to applicable law, you have the following rights in relation to your personal data held by u2slot:

• Right of access — you may request a copy of the personal data u2slot holds about you.
• Right to rectification — you may request correction of any inaccurate or incomplete personal data. You may update most account details directly from your Account settings page.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations described in Section 8.
• Right to restrict processing — you may request that u2slot restrict processing of your personal data in certain circumstances.
• Right to data portability — where processing is based on your consent or a contract, you may request that u2slot provide your personal data in a structured, machine-readable format.
• Right to withdraw consent — where processing is based on consent (for example, marketing communications), you may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to object — you may object to processing of your personal data where that processing is based on legitimate interests, subject to u2slot demonstrating compelling legitimate grounds.

To exercise any of these rights, contact u2slot support via live chat or at [email protected] (plain text — not a clickable link). We will respond to all valid requests within 30 calendar days.

12. Children and Minors

12.1 The u2slot Platform is strictly intended for individuals aged 21 years and older. u2slot does not knowingly collect personal data from individuals under the age of 21.

12.2 If u2slot becomes aware that personal data has been collected from a person under 21, the Account will be immediately suspended, all data will be reviewed, and data collected from the minor will be deleted to the extent permitted by legal retention obligations.

12.3 Parents and guardians are encouraged to use appropriate parental control software to prevent minors from accessing online gaming platforms, including u2slot.

13. Changes to This Policy

13.1 u2slot reserves the right to update or amend this Privacy Policy at any time. Where changes are material, registered members will be notified via the email address on their Account at least 14 days before the changes take effect.

13.2 The current version of this Policy, including the "Last Updated" date, is always available at https://u2slot.app/privacy-policy. Continued use of the Platform following the effective date of any revision constitutes acceptance of the updated Policy.

14. Contact and Complaints

14.1 For any questions, concerns, or data subject rights requests relating to this Privacy Policy or u2slot's processing of your personal data, please contact our support team:

Email: [email protected] (plain text — not a clickable link)
Live Chat: Available 24/7 through the Platform after logging in to your u2slot account.

14.2 If you are not satisfied with u2slot's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. For members based in Malaysia, this is the Department of Personal Data Protection (Jabatan Perlindungan Data Peribadi) under the Malaysian Ministry of Communications and Digital.