Minimum Necessary Collection
otoslot collects personal information only where a genuine purpose exists, such as account registration, KYC verification, MYR transaction review or responsible-gambling safeguards.
Data Protection and Privacy
otoslot Privacy Policy
This policy explains how otoslot collects, uses, safeguards and retains personal information supplied by Malaysian users, including registration details, MYR payment records, identity documents and website usage data.
Effective date: 1 January 2026
Core Privacy Commitments
How We Approach Your Data
The following summary highlights the primary principles behind this policy. Please read the complete document below before using otoslot account or verification features.
Secure Handling
Reasonable technical measures, including HTTPS encryption in transit, are applied to reduce the risk of unauthorised access to account and verification records.
Defined Purposes
Data processed for one defined purpose will not be repurposed incompatibly without an appropriate basis or, where required, renewed consent.
Retention Limits
Personal information is retained only for the period reasonably necessary to fulfil its collection purpose, satisfy legal obligations or resolve outstanding matters.
User Rights
Individuals may seek access to, correction of, or deletion of their personal data subject to applicable law and any overriding obligations related to security or fraud prevention.
Clear Contact Channel
Privacy questions, correction requests and complaints may be sent to the website email address shown in the Contact section of this policy.
Introduction
This Privacy Policy describes how otoslot, the English-language gaming information and entertainment brand available at https://otoslot.cam, processes personal data collected from individuals who visit the website or use its services. It applies to Malaysian users and other visitors regardless of their city of access, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya and Shah Alam.
By using otoslot, you acknowledge that your personal data may be handled as described in this policy. If you do not accept these practices, you should discontinue use and refrain from providing personal information through the website or its associated features.
This policy forms part of the broader agreement between users and otoslot, together with the Terms & Conditions and Responsible Gambling information. Capitalised terms are defined below unless the context requires otherwise.
Definitions
- "Personal Data" means any information relating to an identified or identifiable individual, including name, contact details, device identifiers and financial records.
- "Processing" means any operation performed on Personal Data, such as collection, storage, use, disclosure or deletion.
- "Controller" refers to the entity that determines the purposes and means of processing Personal Data in connection with otoslot.
- "User", "you" or "your" means a natural person accessing or interacting with the otoslot website or account features.
- "KYC" means Know Your Customer identity-verification procedures.
- "MYR" or "RM" means Malaysian Ringgit.
- "Cookies" means small data files stored on a device that may assist in recognising returning visitors or measuring website usage.
Data We Collect
otoslot may collect and process the following categories of Personal Data:
| Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, MyKad / passport / driving licence number | Registration, age verification, KYC compliance |
| Contact Data | Email address, phone number | Account communications, service notices, support |
| Financial Data | MYR deposit and withdrawal records, payment method identifiers for DuitNow, FPX, Touch 'n Go eWallet, Maybank2u, CIMB Clicks, Boost, GrabPay | Transaction processing, fraud prevention, regulatory compliance |
| Verification Documents | ID scans, proof of address, identity selfie | KYC review, age confirmation, security |
| Technical Data | IP address, browser type, device identifiers, operating system | Security, fraud detection, service improvement |
| Usage Data | Pages viewed, session duration, feature interactions | Website improvement, analytics, personalisation |
| Responsible Gambling Data | Limit settings, cooling-off status, self-exclusion records | Safer-play compliance, account controls |
You are not required to provide Personal Data that is categorised as optional in a particular feature; however, withholding required information may prevent access to those account or payment functions.
How Data Is Collected
Personal Data may be collected through the following channels:
- Direct submission: information you enter into registration, verification, payment or support forms within otoslot.
- Automated means: cookies, server logs and similar technologies that record Technical Data when you access the website.
- Third-party payment providers: transaction confirmation, payment identifiers or fraud indicators received from services such as FPX, DuitNow, Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay and other supported Malaysian channels.
- Identity verification services: confirmation or risk signals returned by KYC review processes.
- Public sources: information verifiable through publicly accessible records where relevant to security, fraud prevention or regulatory obligations.
Lawful Basis for Processing
Processing is carried out on one or more of the following bases:
- Contractual necessity: processing required to provide and maintain account features, process MYR transactions and fulfil user requests.
- Legal obligation: processing necessary to comply with applicable anti-money-laundering, fraud-prevention, data-protection or other regulatory requirements.
- Legitimate interests: processing for security monitoring, fraud detection, service improvement and responsible-gambling compliance, where these interests are not overridden by individual rights and freedoms.
- Consent: where you have provided clear, specific and freely given agreement for a particular processing activity, such as optional marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
Purposes of Processing
Personal Data may be processed for the following purposes:
- Registering, managing and securing user accounts.
- Verifying identity and age to confirm eligibility for 21+ casino-style services.
- Processing deposits, withdrawals and MYR transactions through supported Malaysian payment channels.
- Detecting and preventing fraud, money laundering, identity misuse and security threats.
- Communicating account notices, security alerts and service updates.
- Applying responsible-gambling limits, cooling-off periods and self-exclusion records.
- Improving website functions, content quality and user experience.
- Meeting legal, regulatory and compliance obligations.
- Resolving complaints and supporting dispute investigations.
Sharing and Disclosure
otoslot does not sell Personal Data to third parties. Data may be disclosed to the following categories of recipient where necessary and proportionate:
- Payment processors and banking partners: to facilitate MYR deposits and withdrawals through DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Touch 'n Go eWallet, Boost and GrabPay.
- KYC and identity-verification providers: to complete age, identity and address checks as required.
- IT and hosting infrastructure providers: under confidentiality obligations, to support website availability and security.
- Legal, regulatory or law-enforcement authorities: where disclosure is required by applicable law, court order or legitimate regulatory request.
- Fraud prevention and security services: to identify unusual or potentially unlawful activity affecting accounts or payment records.
Recipients are expected to handle Personal Data consistently with applicable privacy obligations and in accordance with the purpose for which it was shared.
International Transfers
otoslot may store or process Personal Data in jurisdictions outside Malaysia. Where such a transfer occurs, appropriate safeguards, such as contractual clauses or equivalent data-protection assurances, should be applied to protect the data to a standard comparable to Malaysian personal-data protection requirements.
If you would like more information about the safeguards applied to a specific transfer, you may submit a request using the website email shown in the Contact section below.
Retention Periods
Personal Data is retained for the minimum period necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, fraud-prevention or dispute-resolution obligations. General guidelines are as follows:
- Account and identity records: retained for the duration of account activity and for a further period required by applicable law after closure, commonly five to seven years for financial records.
- Transaction records: MYR payment and withdrawal records may be retained for up to seven years to satisfy statutory and anti-money-laundering obligations.
- KYC documents: retained for the period required by applicable verification and regulatory standards after the relevant review is completed.
- Self-exclusion and responsible-gambling records: retained as necessary to honour an exclusion and prevent circumvention, even after account closure.
- Technical and usage logs: typically retained for up to twelve months for security and performance purposes, subject to legal requirements.
When data is no longer required, it will be securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.
Security Measures
otoslot applies reasonable technical and organisational measures to protect Personal Data against unauthorised access, loss, alteration, disclosure or destruction. These may include HTTPS encryption for data in transit, access controls, authentication requirements and internal data-handling procedures.
Your responsibilities: No internet transmission is completely secure. You can reduce risk by using a strong, unique password for your otoslot account, keeping your device secure, logging out after each session, and reporting any suspected unauthorised access promptly to the website email shown below. Never share your one-time authentication codes with any person or organisation.
Cookies and Tracking Technologies
otoslot may use cookies or similar technologies to support website functionality, measure usage patterns, recognise returning sessions and maintain security state. The following types may be present:
- Strictly necessary cookies: required for basic navigation, authentication and secure session management. These cannot be disabled without affecting core website functions.
- Analytical cookies: used to understand how visitors interact with different pages, which sections are read most often and whether content is functioning correctly. Data may be aggregated and anonymised.
- Preference cookies: may store user choices such as language, display or session preferences to improve subsequent visits.
Most browsers allow you to manage, restrict or delete cookies through browser settings. Disabling certain cookies may affect the availability or behaviour of some otoslot features.
User Rights
Subject to applicable law, you may exercise the following rights in respect of your Personal Data held by otoslot:
Right of Access
Request a copy of the Personal Data otoslot holds about you and confirmation of how it is processed.
Right of Rectification
Ask for inaccurate or incomplete Personal Data to be corrected without undue delay.
Right to Erasure
Request deletion of Personal Data where retention is no longer lawfully required, subject to overriding legal or security obligations.
Right to Restriction
Ask for processing to be limited in certain circumstances, such as while accuracy is under dispute.
Right to Object
Object to processing carried out on the basis of legitimate interests, particularly for direct marketing purposes.
Right to Portability
Where technically feasible, receive a structured copy of certain data you provided under a contractual or consent basis.
To exercise any of these rights, submit a request via the website email below. We may ask you to provide reasonable identity verification before acting. Requests will be assessed and responded to within a reasonable period consistent with applicable law. Some rights may be limited where otoslot has overriding legal, security, fraud- prevention or regulatory obligations.
Minors and Age Verification
The otoslot website and any associated gaming services are strictly intended for adults aged 21 and above. We do not knowingly collect Personal Data from persons below this age threshold. Where we become aware that data has been submitted by a person under 21, appropriate steps will be taken to restrict access and remove the relevant information.
If you believe a person under 21 has submitted information to otoslot, please notify us using the website email shown in the Contact section so that we may investigate promptly.
Responsible Gambling Data
Where a user sets a deposit limit, activates a cooling-off period or requests self- exclusion, the relevant record is treated as a priority data category. This information may be used to enforce the chosen restriction and to prevent circumvention, including after account closure. Responsible-gambling records may be retained for a longer period than general account data where necessary to honour an ongoing exclusion or comply with applicable safer-gambling requirements.
otoslot does not use responsible-gambling data for marketing or commercial-profiling purposes. Further information about available safer-play tools is available on the Responsible Gambling page of this website.
Changes to This Policy
otoslot may revise this Privacy Policy to reflect changes in services, applicable law, technology, payment methods or data-handling practices. The updated policy will be published on this page with a revised effective date. Material changes may be notified through website notices or, where appropriate, direct communication to registered users.
Continued use of otoslot after a policy revision constitutes acceptance of the updated terms. If you do not agree with a revision, you should cease using relevant services before the revision takes effect.
Contact Us
For privacy-related enquiries, data access requests, correction requests, complaints or questions about this policy, please contact otoslot using the website email address below. Include a clear description of your request and, where applicable, the email address associated with your account to help us respond accurately.
Website email: [email protected]
Do not include passwords, full payment card numbers or one-time authentication codes in any email. We aim to acknowledge and assess privacy requests within a reasonable period consistent with applicable data-protection obligations.
Continue Exploring
Visit Homepage
Return to the otoslot Homepage
Visit the homepage to explore Malaysian payment information, gaming categories, sports betting guides and safer-play resources. All services are intended for eligible adults aged 21 and above.