bundaslot Privacy Policy

Introduction

This Privacy Policy sets out how bundaslot (referred to herein as "we", "us", "our" or "the platform") collects, uses, discloses and retains personal data submitted by individuals who access or use the bundaslot website and associated services. The term "you" or "player" refers to any person who creates an account, browses the platform or otherwise interacts with bundaslot.

This policy is written in English, as the bundaslot service is an English-language platform designed for Malaysian adults. If you reside in Malaysia or access the platform from Malaysia, this policy applies to your use. bundaslot aims to handle personal data responsibly and in accordance with sound privacy practice, and this document provides the transparency required for you to understand and exercise your rights.

Definitions

• Personal Data — any information that identifies or could reasonably be used to identify a living individual, including name, email address, device identifiers, financial records and identity documents.
• Processing — any operation performed on personal data, including collection, recording, storage, use, disclosure, restriction, erasure or destruction.
• Data Controller — the legal entity that determines the purposes and means of processing your personal data in connection with the bundaslot service.
• KYC — Know Your Customer, the identity and age verification process used to confirm account eligibility and prevent fraud or money laundering.
• Payment Data — information relating to deposits, withdrawals, transaction history and the payment methods linked to an account, including MYR transactions processed via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank or Hong Leong.
• Cookies — small text files placed on your device to support session management, user preferences and platform analytics.

Data We Collect

bundaslot collects personal data in the following categories, depending on your level of interaction with the platform:

bundaslot does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs or health information except where strictly required to fulfil a responsible-gambling duty (for example, processing a self-exclusion linked to a disclosed problem).

Purposes and Legal Bases for Processing

Personal data is processed only where a lawful basis exists. The principal purposes and their corresponding bases are described below:

• Account registration and management — processing is necessary to perform the account agreement, including verifying your identity and age (21+ requirement), activating your bundaslot account and maintaining accurate records.
• Payment processing — processing is necessary to execute deposit and withdrawal requests in MYR via local payment channels and to maintain transaction records.
• Fraud prevention and security — processing is carried out in our legitimate interests and where required by applicable compliance obligations to prevent misuse, detect unusual account activity and protect player funds.
• Responsible gambling — processing is carried out to fulfil our duty to identify at-risk play and apply appropriate controls such as deposit limits, cooling-off periods and self-exclusion. Where you disclose a gambling-related health concern, processing of that data is limited strictly to acting on your request.
• Customer support — processing is necessary to respond to your enquiries, investigate complaints and maintain records of correspondence.
• Platform improvement — aggregated and anonymised usage data may be analysed under our legitimate interests to improve game coverage, payment reliability and user experience. This processing does not directly identify you.
• Direct marketing — promotional communications are sent only where you have given consent or where we have a legitimate interest in informing existing players of relevant offers, subject to your right to opt out at any time.

Data Sharing and Disclosure

bundaslot does not sell personal data to third parties. Data may be shared in the following limited circumstances:

• Payment partners — transaction data is shared with relevant payment providers (such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank and Hong Leong) to the extent required to process your request.
• Identity verification providers — name, date of birth and document information may be submitted to KYC processing partners for age and identity checks in connection with account eligibility.
• Game and platform providers — usernames and session tokens may be passed to software providers for the purpose of loading and operating games. Financial balances are generally managed at the account level and not passed to game providers.
• Legal and regulatory obligations — data may be disclosed where required by law, court order, regulatory instruction or where necessary to prevent, detect or report a serious crime.
• Service providers — hosting, analytics and support infrastructure providers may access limited technical data under contractual obligations to process it only as instructed and not for their own purposes.

Any third party receiving personal data from bundaslot is required to handle it in accordance with applicable data protection standards and is prohibited from using it for any purpose other than the one for which it was shared.

Cookies and Tracking Technologies

bundaslot uses cookies and similar tracking technologies to operate the platform, maintain your logged-in session, remember your preferences and compile aggregated usage statistics. Cookies placed for essential session operation cannot be disabled without preventing account access.

Non-essential cookies, including those used for analytics and personalisation, may be managed through your browser settings. Disabling non-essential cookies does not affect your ability to place wagers, make deposits or access account controls. Clearing cookies will end your current session and may remove saved preferences. Tracking technologies provided by third-party game or analytics software operate under those parties' own policies as well as the contractual restrictions bundaslot places on them.

Data Retention

Personal data is kept for as long as your bundaslot account remains open and for a defined period after closure, as follows:

• Identity and KYC documentation may be retained for a minimum of five years after account closure to satisfy anti-money-laundering and fraud prevention record-keeping obligations.
• Transaction and payment records may be retained for up to seven years for financial compliance and dispute-resolution purposes.
• Support and complaint correspondence is retained for a minimum of three years to allow for the investigation of recurring issues or formal complaints.
• Technical and usage data in identifiable form is deleted or anonymised within 24 months of the last platform interaction unless a specific compliance reason requires longer retention.
• Self-exclusion records are retained for the duration of any exclusion and for five years thereafter to prevent unintended reactivation.

After the applicable retention period expires, data is securely deleted or irreversibly anonymised so that it can no longer be linked to an individual.

Your Rights

Subject to applicable data protection law, you may exercise the following rights in relation to your personal data held by bundaslot:

• Access — request a copy of the personal data we hold about you and receive information about how it is processed.
• Rectification — request correction of inaccurate or incomplete personal data, particularly contact details, name spelling or address records.
• Erasure — request deletion of personal data where it is no longer needed for the purpose for which it was collected and no overriding legal obligation requires its continued retention.
• Restriction — request that we limit processing while a contested accuracy or lawfulness dispute is being resolved.
• Objection — object to processing carried out on the basis of legitimate interests where your individual circumstances justify it.
• Portability — request that certain data provided by you be returned in a structured, commonly used and machine-readable format.
• Withdraw consent — where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

Requests are subject to identity verification before bundaslot can safely release or alter data. Some rights may be limited by legal retention obligations or fraud-prevention requirements. bundaslot will respond to valid requests within a reasonable period.

Security Measures

bundaslot employs technical and organisational controls to protect personal data against unauthorised access, accidental loss, alteration or disclosure. Measures include encrypted data transmission for account and payment interactions, access controls limiting staff to only the data needed for their role, regular review of third-party processor security standards and monitoring for unusual account or transaction patterns.

No internet-based system can guarantee absolute security. You can reduce risk by using a strong, unique password for your bundaslot account, avoiding public or shared networks when logging in, signing out of your account when you have finished using the platform and reporting any suspected unauthorised activity to support promptly.

Children and Age Restriction

bundaslot is strictly restricted to adults aged 21 and above. We do not knowingly collect personal data from persons under 21. If you believe that a person under 21 has created a bundaslot account or submitted personal data to the platform, please notify us immediately through the support contact so that the account and associated data can be reviewed and closed where appropriate. Age verification controls are applied at registration and may be repeated if bundaslot has reason to question the stated age of an account holder.

Changes to This Policy

bundaslot may update this Privacy Policy from time to time to reflect changes in applicable data protection standards, operational practices, payment methods or legal requirements. The effective date at the top of the policy will be updated when a new version is published. Material changes that affect the way your data is used will be communicated through an appropriate platform notice.

Your continued use of bundaslot after an updated policy takes effect constitutes acceptance of the revised terms. If you object to any change, you should stop using the platform and request account closure. Outstanding balances following a valid account closure request will be processed in accordance with the relevant withdrawal and verification procedures.

Contact Us

If you have a question about this Privacy Policy, wish to exercise a data right or want to raise a concern about how your personal data has been handled, please contact the bundaslot support team. Include your registered email address, a clear description of your request and, for access or deletion requests, a copy of a suitable identity document.

Website email: [email protected]

The email address above is displayed as plain text only and is not a clickable link. Responses to data rights requests are provided within a reasonable period following identity verification. For general account and payment enquiries, see the FAQ page.