Privacy Policy

This Privacy Policy ("Policy") describes how FufuSlot ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects personal data when you access or use the FufuSlot gaming platform at https://fufuslot.lat and all related services, features, and communications.

FufuSlot operates as an online gaming and entertainment platform serving Malaysian players. We are committed to handling your personal data responsibly and in accordance with applicable data protection standards. This Policy applies to all registered account holders, visitors to our website, and any person whose personal data we process in connection with the provision of our services.

By registering an account on FufuSlot or by continuing to use the platform after this Policy has been updated, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions, which govern your use of the platform.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

FufuSlot collects personal data from you in three principal ways: (a) data you provide directly, (b) data generated automatically through your use of the platform, and (c) data received from verified third-party sources for fraud prevention and identity verification purposes.

Data You Provide Directly:

• Registration Information: Full legal name, date of birth, gender, residential address (including city — e.g., Kuala Lumpur, Penang, Shah Alam), email address, and phone number provided when creating your account;
• KYC Documentation: Copies of government-issued identification (e.g., Malaysian MyKad, passport, driving licence) and proof of address documents submitted during identity verification;
• Payment Information: Details of the payment method used for deposits and withdrawals — such as your Touch 'n Go eWallet account identifier, Boost account details, GrabPay account reference, Maybank or CIMB FPX account information, DuitNow registered number, or cryptocurrency wallet address. Note: full bank account numbers or card numbers are not stored directly by FufuSlot — payment processing is handled by our certified payment partners;
• Support Communications: Content of messages sent to our support team via live chat or email, including any attachments you submit;
• Voluntary Profile Information: Any additional information you choose to provide in your account profile settings.

Data Collected Automatically:

• IP address, device type, operating system, and browser type;
• Session timestamps, login history, and pages visited;
• Gameplay and betting history, including games played, stakes placed, and results;
• Transaction records including deposit amounts, withdrawal requests, and bonus activations;
• Cookie and session token data (see Section 9 — Cookies).

Data from Third Parties:

• Identity verification data returned by KYC verification service providers;
• Fraud risk scores and sanction screening results from third-party compliance providers;
• Payment confirmation and transaction status data returned by payment processors (FPX, DuitNow, e-wallet providers, and cryptocurrency network confirmations).

FufuSlot uses personal data only for the purposes described in this Policy. The primary purposes for which we process your personal data are set out in the table below:

FufuSlot does not use personal data for any purpose incompatible with those listed above without first obtaining your consent or establishing a separate legal basis for the additional processing.

Each instance of personal data processing carried out by FufuSlot is conducted on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and FufuSlot — specifically, to operate your account, process deposits and withdrawals, and provide the gaming services you have agreed to receive;
• Legal Obligation: Processing is required for FufuSlot to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) checks, KYC requirements, and lawful data retention mandates;
• Legitimate Interests: Processing is carried out for FufuSlot's legitimate business interests — including fraud detection, platform security, and platform analytics — where such interests are not overridden by your fundamental rights and freedoms;
• Consent: For optional processing activities such as marketing communications and non-essential cookies, processing is carried out only where you have given specific, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

FufuSlot does not sell, rent, or trade your personal data to any third party. Personal data is shared externally only in the following limited and controlled circumstances:

• Payment Processors: Your payment account details are shared with our certified payment partners — including FPX gateway operators, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency network operators — solely to the extent necessary to process your transactions;
• KYC and Identity Verification Providers: Your identity documents and personal details are shared with our contracted KYC verification service providers for the sole purpose of verifying your identity and age;
• Fraud Prevention and Compliance Providers: Transaction data and risk indicators may be shared with third-party fraud detection and AML screening services to identify and prevent fraudulent activity;
• Game Content Providers: Anonymous session identifiers and gameplay data are shared with licensed game content providers to operate their games on our platform. These providers do not receive your full identity details;
• Legal and Regulatory Authorities: Personal data may be disclosed to law enforcement agencies, financial intelligence authorities, or other regulatory bodies when FufuSlot is required to do so by applicable law, court order, or other binding legal process;
• Professional Advisors: Personal data may be shared with our legal advisors, auditors, or insurers in connection with the protection of our legitimate business interests, subject to confidentiality obligations.

All third parties to whom FufuSlot discloses personal data are contractually required to handle that data with appropriate security standards and to use it only for the specified purpose for which it was disclosed.

FufuSlot retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account's active status plus a minimum period of five (5) years following account closure, to satisfy legal and regulatory obligations including anti-money laundering (AML) record-keeping requirements;
• KYC Documentation: Retained for a minimum of five (5) years following the end of the customer relationship, in accordance with financial crime prevention regulations;
• Transaction Records: Retained for a minimum of five (5) years following each transaction date;
• Support Communications: Retained for a period of three (3) years from the date of the most recent communication in a thread;
• Cookie and Analytics Data: Anonymised analytics data is retained for a maximum of twenty-six (26) months. Session cookies expire at the end of your browser session.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.

FufuSlot implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• Transport Layer Security: All data in transit between your device and our servers is encrypted using 256-bit TLS/SSL protocols, consistent with the standards applied by leading Malaysian financial institutions;
• Encryption at Rest: Sensitive personal data stored on our servers — including KYC documents and payment method references — is encrypted at rest;
• Access Controls: Access to personal data within FufuSlot is restricted on a strict need-to-know basis. Administrative access to player data requires multi-factor authentication and is subject to audit logging;
• Regular Security Audits: Our platform and infrastructure undergo regular independent security assessments, including penetration testing and vulnerability scanning;
• Incident Response: FufuSlot maintains a documented data breach response plan. In the event of a breach affecting your personal data, we will notify you and relevant authorities within the timeframes required by applicable law.

FufuSlot uses cookies and similar technologies on our platform. A cookie is a small text file stored on your device when you visit our website. We use the following categories of cookies:

FufuSlot does not use advertising cookies or any third-party cookies that build individual advertising profiles based on your browsing behaviour across other websites.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the FufuSlot platform, including your ability to maintain a logged-in session.

In the course of operating the FufuSlot platform, your personal data may be transferred to and processed in jurisdictions outside Malaysia, including the locations of our server infrastructure, KYC verification providers, and game content providers. Where such transfers occur, FufuSlot ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual data processing agreements incorporating data protection obligations equivalent to those described in this Policy;
• Use of service providers that maintain internationally recognised security certifications (such as ISO 27001);
• Technical and organisational measures that ensure data is protected to the same standard irrespective of the location in which it is processed.

If you would like further information about the specific safeguards applied to any particular international transfer, please contact us using the details in Section 15.

FufuSlot is strictly for persons aged 21 and above. We do not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory component of the KYC process, and accounts found to have been created by persons under 21 will be permanently closed immediately upon discovery.

If you believe that a person under the age of 21 has created an account on FufuSlot or has submitted personal data to us, please notify us immediately via the contact details in Section 15. Upon receiving such notification, FufuSlot will investigate and, if confirmed, promptly delete all personal data associated with the underage individual's account.

We also strongly encourage the use of parental control software by parents and guardians to restrict minors' access to online gaming platforms. FufuSlot supports and endorses responsible use of such tools.

Subject to applicable law and certain exceptions described below, you have the following rights with respect to your personal data held by FufuSlot:

To exercise any of the rights listed above, please contact our support team via live chat or at the email address listed in Section 15. We will verify your identity before actioning any data rights request. We aim to respond to all requests within 30 calendar days. For complex requests, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it within the initial 30-day window.

If you are dissatisfied with how FufuSlot has handled your personal data, or with our response to a data rights request, you have the right to raise a complaint. We encourage you to contact us in the first instance using the details in Section 15 so that we have the opportunity to address your concerns directly.

FufuSlot operates a formal complaints handling process. Upon receipt of a complaint, we will:

1. Acknowledge your complaint in writing within five (5) business days;
2. Investigate the matter and provide you with a substantive written response within thirty (30) calendar days;
3. Where the complaint raises a complex issue, notify you within the initial 30-day period if additional time is required and provide an estimated resolution date.

If you remain unsatisfied following our response, you may also have the right to escalate the matter to the relevant data protection authority in the jurisdiction applicable to your complaint.

FufuSlot reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform features. Where changes are material — that is, where they significantly affect your rights or the ways in which we process your personal data — we will provide advance notice to registered players via the email address on file or via a prominent notice displayed upon login.

The "Last Reviewed" date at the top of this page reflects the date on which the Policy was most recently updated. Continued use of the FufuSlot platform following the effective date of any update constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, please stop using the platform and contact our support team to arrange closure of your Account.

We recommend reviewing this Policy periodically to stay informed of any changes. The current version of this Policy is always accessible at https://fufuslot.lat/privacy-policy.

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data FufuSlot holds about you, please contact us through one of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the live chat widget on the FufuSlot platform. Our support agents respond in English and can assist with data rights requests, privacy queries, and complaints.
• Email (plain text — not a clickable link): [email protected]

When submitting a data rights request or privacy complaint, please include your registered account username and a clear description of your request or concern. This will help our team locate the relevant data and respond to you as quickly as possible.