Privacy Policy Shopislot – Your Data Is Safe, Your Privacy Is Protected

Shopislot collects various types of personal information when you register, use the platform, or get in touch with our team. The information we collect falls into three main categories:

Information You Provide Directly:

• Full name as stated on your Malaysian identity card (MyKad).
• Date of birth for verification of the 18-year age requirement.
• An active Malaysian mobile phone number.
• A valid and active email address.
• Information on the payment method used — whether Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX, Maybank2u, or CIMB Clicks. Shopislot does not store your full card number — only an encrypted token is used for transaction reference.
• Identity verification documents such as a copy of your MyKad submitted during the KYC process.

Automatically Collected Information:

• IP address and general geolocation data (state/city only, not precise coordinates).
• The type of device, operating system, and web browser you are using.
• Session data such as pages visited, time spent on each page, and actions taken.
• Technical data logs for troubleshooting and security audit purposes.

Transaction Information:

• Records of all deposits and withdrawals, including amounts, dates, times, and payment methods.
• Betting and gaming history, including games played, wager amounts, and results.
• Records of bonuses and promotions used.

Shopislot uses your personal information only for legitimate purposes as outlined below. We do not use your data for any other purpose without first obtaining your consent:

• Account Management: To create, verify, and manage your Shopislot account, including the KYC process and age verification.
• Transaction Processing: To process deposits and withdrawals through your chosen Malaysian payment method securely and accurately.
• Customer Service: To enable our support team to assist you effectively with inquiries, complaints, or technical issues.
• Platform Security: To detect and prevent fraud, money laundering, and other suspicious activities that could compromise the safety of the platform and other members.
• Platform Enhancement: To analyse usage patterns on an aggregate (not individual) basis for the purpose of improving Shopislot's performance and user experience.
• Service Communications: To send important account notifications such as transaction confirmations, security alerts, and policy updates.
• Responsible Gaming: To monitor gaming patterns and reach out to members who may be showing signs of problem gambling, in line with our commitment to player well-being.
• Legal Compliance: To fulfil legal obligations, regulatory requirements, or court orders applicable in Malaysia.

Shopislot does not sell, rent, or trade your personal information to any third party. However, in the following limited circumstances, we may need to share your information:

• Payment Processors: Required transaction information is shared with payment service providers such as TnG, GrabPay, DuitNow, and FPX operators solely for the purpose of processing your transactions. These providers are bound by strict confidentiality agreements.
• Game Software Providers: Minimal game session information is shared with providers such as PG Soft and Pragmatic Play to operate online games. This data does not include your full personally identifiable information.
• Legal Authorities: Where required by law, court order, or a legitimate request from Malaysian authorities, Shopislot may be required to disclose certain information. We will notify you if we do so, unless prohibited by law.
• Technical Service Providers: The cloud, hosting, and technical support service providers we work with have limited access to your data solely to carry out their technical functions, and are bound by strict data processing agreements.

In all of the above data-sharing scenarios, Shopislot ensures that recipient parties adhere to data protection standards equivalent to or higher than those we uphold ourselves.

Shopislot retains your personal information for as long as your account is active or as needed to provide services to you. Our data retention policy is as follows:

• Active account data is retained for as long as your account remains active on Shopislot.
• Following account closure, basic account data is retained for 7 years for legal compliance and financial audit purposes, in line with Malaysian legal requirements.
• Financial transaction records are retained for a minimum of 7 years as required by Malaysia's anti-money laundering (AML) regulations.
• Customer support communication logs are retained for 3 years for quality control and dispute resolution purposes.
• Session data and technical logs are retained for 90 days before being automatically deleted.

Shopislot uses cookies and similar tracking technologies to improve your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled as they are critical to platform operations.
• Preference Cookies: Saves your preferences such as display language and display settings so you do not have to reconfigure them each time you visit the platform.
• Analytics Cookies: Helps us understand how members use our platform in aggregate, so we can make meaningful improvements. This data is collected anonymously and cannot be linked to any specific individual.

You can manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the Shopislot platform. For more information on how to manage cookies, please refer to your web browser's help documentation.

Shopislot continuously invests in security infrastructure to ensure your data is always protected. The technical and organizational security measures we employ include:

• 256-bit SSL/TLS encryption for all data communications between your device and our servers.
• Encryption of sensitive data at rest in the database using the AES-256 encryption algorithm.
• Role-based access control — Shopislot staff can only access the data necessary to carry out their responsibilities.
• Round-the-clock security monitoring by our cybersecurity team to detect any suspicious activity.
• Regular security audits by independent parties to identify and address potential vulnerabilities.
• Mandatory cybersecurity awareness training for all Shopislot staff with access to member data.
• A clear incident response plan to ensure swift action is taken in the event of any data breach.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and Shopislot's own policies, you have the following rights regarding your personal data:

• Right to Access: You may request a copy of all personal data we hold about you.
• Right to Rectification: You may request that we correct any inaccurate or incomplete data.
• Right to Erasure: You may request the deletion of your personal data, subject to legal requirements to retain certain records.
• Right to Withdraw Consent: You may withdraw your consent to data processing at any time, including unsubscribing from marketing communications.
• Right to Object: You may object to the processing of your data for direct marketing purposes.

To exercise any of these rights, please contact the Shopislot support team via email at support@shopislot.best or via 24/7 live chat. Requests will be processed within 14 business days of receipt. We may require identity verification before processing any data-related requests.

Shopislot reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legislative developments, or platform improvements. When material changes are made, we will:

• Updating the "Last updated" date at the top of this page.
• Notifying all members via their registered email address or in-platform notifications.
• Providing at least 7 days for you to review the changes before they take effect.

Continued use of the Shopislot platform after any policy changes take effect will be considered your acceptance of the updated policy. If you do not agree with the changes, please discontinue use of the platform and contact us to close your account.

If you have any questions, concerns, or requests regarding Shopislot's Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Privacy Email: support@shopislot.best — please mark your email subject as "Privacy Enquiry" for faster processing.
• Live Chat: Available 24/7 on the Shopislot platform. Our team is able to communicate in Bahasa Melayu.
• Response Time: All privacy enquiries will be responded to within 3 business days. Data rights requests will be processed within 14 business days.