Privacy Policy

This Privacy Policy ("Policy") describes how ImbaSlot ("ImbaSlot", "we", "us", "our") collects, uses, stores, discloses and protects the personal data of users ("you", "Player", "User") who access or use the ImbaSlot website at https://imbaslot.cam and all associated services, features and functionality (collectively, the "Platform" or "Services").

ImbaSlot operates as an online entertainment and gaming platform serving players primarily across Malaysia, including users based in Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru and all other regions of the country. Our platform processes personal data and financial transactions in Malaysian Ringgit (MYR) and is designed to comply with applicable data protection standards and best practices.

We take your privacy seriously. This Policy is intended to be transparent and readable — not a document designed to obscure how your data is used. We encourage you to read it in full. If you have questions about any provision, please contact our support team using the details in Section 16.

By registering an account or using the ImbaSlot platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

For the purposes of this Privacy Policy, the following definitions apply:

ImbaSlot collects personal data that is necessary to provide you with safe, functional and personalised gaming services. The categories of data we collect are set out in the table below:

We do not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs or health data, unless specifically required for responsible gambling assessments and only with your explicit consent.

ImbaSlot collects personal data through the following channels:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting our support team via live chat, email or WhatsApp, or participating in promotions;
• Automated Collection: Technical and usage data collected automatically through cookies, server logs, analytics tools and session monitoring software when you interact with the platform;
• Third-Party Sources: Identity and address verification data obtained from KYC service providers; fraud signals from risk management partners; payment confirmation data from FPX, DuitNow, e-wallet operators and cryptocurrency networks;
• Responsible Gambling Monitoring: Behavioural data inferred from your gameplay patterns, session lengths and betting volumes to identify potential signs of problem gambling in accordance with our duty of care obligations.

ImbaSlot processes your personal data for the following purposes, each of which is described alongside the corresponding legal basis in Section 6:

ImbaSlot processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and ImbaSlot — including account management, payment processing, KYC verification and customer support;
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML reporting obligations, age verification requirements and regulatory record-keeping;
• Legitimate Interests: Processing necessary for ImbaSlot's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring and service improvement — provided such interests do not override your fundamental rights;
• Consent: Processing carried out on the basis of your explicit consent, including the sending of marketing communications and the processing of any sensitive data. You may withdraw consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

ImbaSlot does not sell, rent or trade your personal data to third parties. We may share your data with the following categories of recipient solely to the extent necessary to deliver our Services or fulfil legal obligations:

• Payment Processors: Malaysian payment providers including FPX network operators, DuitNow, Touch 'n Go eWallet, Boost, GrabPay and cryptocurrency exchange partners, for the purpose of processing your MYR transactions;
• KYC & Identity Verification Providers: Specialist third-party services that assist ImbaSlot in verifying your identity and age in accordance with our regulatory obligations;
• Technology & Infrastructure Providers: Cloud hosting, database management and content delivery network (CDN) partners who process data on ImbaSlot's behalf under strict data processing agreements;
• Fraud & Risk Management Partners: Third-party providers who assist in identifying and preventing fraudulent account activity, collusion and bonus abuse;
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order or regulatory direction, ImbaSlot may be required to disclose personal data to competent authorities. ImbaSlot will notify you of such disclosure where legally permitted to do so;
• Professional Advisers: Legal counsel, auditors and compliance consultants acting under professional confidentiality obligations.

All third-party processors engaged by ImbaSlot are contractually required to process your personal data only in accordance with our instructions and in compliance with applicable data protection standards.

ImbaSlot's primary operations and data processing activities are focused on serving Malaysian players. Where it is necessary to transfer your personal data to service providers or infrastructure partners located outside Malaysia, ImbaSlot takes steps to ensure that appropriate safeguards are in place to protect the security and confidentiality of your data during transit and storage.

Such safeguards may include:

• Contractual data protection clauses binding the recipient to equivalent data protection standards;
• Transfers only to jurisdictions with an adequate level of data protection as recognised under applicable frameworks;
• Technical security measures including encryption in transit and at rest.

If you have concerns about international transfers of your data, please contact us using the details provided in Section 16.

ImbaSlot uses cookies and similar tracking technologies to maintain platform functionality, improve the player experience and gather analytical data. The categories of cookies we use are as follows:

You can manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent certain platform features from functioning correctly.

ImbaSlot does not use cookies to track your activity on third-party websites unrelated to our platform, and we do not participate in cross-site advertising networks.

ImbaSlot implements robust technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration or disclosure. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the ImbaSlot platform is encrypted in transit using current TLS standards;
• Encryption at Rest: Sensitive personal and financial data stored on our servers is encrypted at rest;
• Access Controls: Personal data is accessible only to authorised ImbaSlot personnel who require it for legitimate operational purposes, governed by role-based access controls;
• Two-Factor Authentication: Available for all player accounts to add an additional layer of security beyond password protection;
• Regular Security Audits: ImbaSlot conducts periodic security assessments, vulnerability scanning and penetration testing of its platform infrastructure;
• Incident Response: ImbaSlot maintains a documented data breach response plan. In the event of a breach that poses a risk to your rights and freedoms, we will notify you and the relevant authorities as required by applicable law.

ImbaSlot retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory or contractual obligations. The following retention periods apply as general guidelines:

Where personal data is no longer required for any active purpose, it will be securely deleted or anonymised. Anonymised data (from which you can no longer be identified) may be retained indefinitely for statistical and analytical purposes.

Subject to applicable law, you have the following rights in respect of your personal data held by ImbaSlot. To exercise any of these rights, contact us using the details in Section 16.

ImbaSlot will respond to all data rights requests within 30 calendar days. Where a request is complex or requires additional time, we will notify you within the initial 30-day period and provide a revised timeline.

ImbaSlot's Services are strictly intended for individuals aged 21 years and above. We do not knowingly collect, process or retain personal data from any person under the age of 21.

If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete such data and close the associated account. Any funds deposited by a minor will be returned to the originating payment method.

Parents and guardians are advised to use appropriate parental control software to prevent minors from accessing online gambling websites. ImbaSlot supports responsible family online safety practices.

The ImbaSlot platform may display informational references to third-party services such as payment providers (Touch 'n Go eWallet, Boost, Maybank, CIMB, DuitNow, FPX) in the context of describing available payment methods. ImbaSlot does not embed third-party advertising links, affiliate tracking links or external site hyperlinks that would direct you away from our platform for commercial purposes.

Where reference is made to third-party payment processors or service providers for informational clarity, ImbaSlot is not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any payment provider or service you choose to use independently of ImbaSlot.

ImbaSlot reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements or platform functionality. The "Last Updated" date at the top of this document will be revised whenever a material change is made.

Where changes are material — meaning they significantly affect how your personal data is processed or your rights as a data subject — we will notify you by email to your registered address and/or by a prominent notice on the ImbaSlot homepage prior to the changes taking effect.

Minor amendments, including typographical corrections and clarifications that do not alter the substance of our data processing practices, may be made without prior notice.

Continued use of the ImbaSlot platform following the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you disagree with any amendment, you should cease using the platform and may request account closure in accordance with our Terms & Conditions.

The most current version of this Privacy Policy is always available at https://imbaslot.cam/privacy-policy.

If you have any questions, concerns or requests relating to this Privacy Policy, the processing of your personal data, or the exercise of your data rights, please contact ImbaSlot through any of the following channels:

ImbaSlot serves players across Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru and all regions of Malaysia. Our support team is available at all hours regardless of your location within Malaysia.

For formal data protection complaints that cannot be resolved through our internal process, you may wish to contact the relevant data protection authority in your jurisdiction.