Privacy Policy

This Privacy Policy (hereinafter referred to as "this Policy" or "the Privacy Policy") is issued by Komslot (hereinafter referred to as "the Company", "Komslot", "we", "us", or "our") and governs the collection, processing, storage, use, and disclosure of personal data relating to all users ("you", "the User", or "the Player") of the Komslot platform, accessible at komslot.cam and any associated sub-domains, mobile interfaces, or applications.

Komslot is committed to handling your personal data with integrity, transparency, and in compliance with applicable data protection principles under relevant international frameworks. We recognise that players entrust us with sensitive information — including identity documents, payment details, and gaming activity — and we take that responsibility seriously.

By registering an Account on the Komslot platform, accessing any part of our services, or otherwise providing us with personal data, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. This Policy is incorporated by reference into Komslot's Terms and Conditions, which form the complete agreement governing your use of the platform.

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, identification number, contact details, location data, IP address, or any factor specific to the physical, economic, or online identity of that person.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, retrieval, use, disclosure, transfer, erasure, or destruction — whether automated or manual.
• "Data Controller" means Komslot, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third-party organisation that processes Personal Data on behalf of Komslot under contractual instruction and data protection obligations.
• "Consent" means any freely given, specific, informed, and unambiguous indication of the User's agreement to the processing of their Personal Data for a stated purpose.
• "KYC Data" means identity and address verification documentation submitted by Users as part of the Know Your Customer compliance process, including government-issued identification and proof of address.
• "Sensitive Personal Data" means categories of Personal Data that warrant heightened protection, including financial information, identification numbers, and data relating to health or criminal record — to the extent relevant to the Company's operations.
• "Cookies" means small text files placed on your device by the Platform for the purposes of session management, preference storage, analytics, and security.

Komslot collects the following categories of personal data from users of the platform:

Komslot collects personal data through the following means:

• Direct provision by you: When you register an Account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your profile, you directly provide us with personal data.
• Automated collection: When you browse and use the Platform, we automatically collect Technical Data through cookies, server logs, and similar technologies embedded in the Platform.
• Third-party payment processors: When you transact through Malaysian payment methods such as Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost, or GrabPay, transaction confirmation data is received from the relevant payment service provider.
• Identity verification services: Where third-party KYC verification partners are engaged, they may return verification status and identity match data to the Company following submission of your documents.
• Fraud and security monitoring systems: Automated systems monitor for suspicious activity and generate internal flags based on behavioural patterns — this does not involve obtaining data from external sources but processes data already held within your Account.

Komslot processes your personal data on one or more of the following legal bases, depending on the specific processing activity in question:

• Contractual necessity: Processing required to fulfil the agreement between you and Komslot — including operating your Account, processing deposits and withdrawals, and delivering gaming services.
• Legal obligation: Processing required to comply with applicable legal and licensing obligations — including anti-money laundering (AML) compliance, age verification, and record-keeping requirements imposed by international gaming licence conditions.
• Legitimate interests: Processing carried out for the Company's legitimate business interests, where those interests are not overridden by your rights — including fraud detection, platform security, responsible gambling monitoring, and improving the platform experience. We conduct proportionality assessments before relying on this basis.
• Consent: Where required and where no other legal basis applies — for example, sending you marketing communications or optional promotional notifications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Komslot uses the personal data collected from you for the following specific purposes:

• Account management: Creating, maintaining, and securing your Komslot Account; verifying your identity and age (minimum 21 years); and processing changes to your Account settings.
• Payment processing: Facilitating deposits via your selected Malaysian payment method and processing withdrawal requests to your verified account. All financial data is processed exclusively for the purpose of completing your requested transactions.
• Regulatory compliance: Meeting the Company's obligations under its international gaming licence framework, including KYC requirements, AML procedures, and responsible gambling obligations.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, identity theft, money laundering, and other prohibited conduct. This includes automated risk-scoring systems that flag unusual patterns for manual review.
• Responsible gambling: Monitoring gaming activity for indicators of problem gambling and ensuring that responsible gambling tools (deposit limits, self-exclusion, session reminders) function correctly for each Account.
• Customer support: Responding to enquiries, processing complaints, and resolving disputes using relevant Account and communications data.
• Platform improvement: Analysing aggregated and anonymised usage data to identify and address platform performance issues, improve game selection, and enhance the overall user experience for Malaysian players.
• Marketing communications (where consented): Sending you information about relevant promotions, bonuses, and platform updates where you have explicitly opted in to receive such communications. You may unsubscribe at any time.

Komslot does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the following limited and controlled circumstances:

• Licensed payment processors: Personal and financial data is shared with payment service providers (including processors handling FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency gateways) solely for the purpose of completing your requested transactions. These providers are contractually bound to use your data only for that purpose.
• KYC and identity verification partners: Identity documents submitted for KYC verification are transmitted to licensed third-party identity verification providers under strict data processing agreements. These providers verify your documents and return a verification result — they do not retain your documents beyond what is necessary for the verification process.
• Fraud and security service providers: Aggregated or pseudonymised Technical Data may be shared with fraud prevention and cybersecurity services engaged by the Company to protect the Platform and its users.
• Game content providers: Gaming activity data necessary for game delivery, dispute resolution, and RNG auditing may be shared with licensed game studios whose content is hosted on the Platform. This data is provided under contractual data protection terms.
• Legal and regulatory authorities: The Company will disclose personal data where required to do so by applicable law, court order, or the lawful request of a competent regulatory or law enforcement authority — including where required under the Company's international gaming licence.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or substantially all of the Company's assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations continuing to apply.

All third parties with whom Komslot shares personal data are required to maintain appropriate technical and organisational security measures and are prohibited from using your data for any purpose other than that for which it was shared.

As an internationally operated platform, Komslot may process and store personal data on servers located outside of Malaysia. Where data is transferred to jurisdictions that do not provide a level of data protection equivalent to the standards applied in the European Union or other recognised frameworks, the Company implements appropriate safeguards to protect your data during and after such transfers.

These safeguards include, but are not limited to, contractual data protection clauses, data processing agreements that bind recipients to equivalent obligations, and technical security measures ensuring data integrity in transit and at rest.

By providing your personal data to Komslot, you acknowledge that your data may be transferred and processed in jurisdictions outside Malaysia as described in this Section, and you consent to such transfers on the basis that appropriate safeguards are in place.

Komslot retains personal data for as long as necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve any disputes or enforce agreements arising from your Account usage.

General retention periods applied by the Company are as follows:

• Account and identity data: Retained for the duration of your active Account, plus a minimum of five (5) years following Account closure — in accordance with anti-money laundering record-keeping requirements applicable under the Company's licensing framework.
• KYC documents: Retained for a minimum of five (5) years following Account closure or the date of the last transaction associated with the Account, whichever is later.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of each transaction, in compliance with standard financial record-keeping obligations.
• Gaming activity logs: Retained for a minimum of three (3) years from the date of activity, used for dispute resolution, responsible gambling monitoring, and audit purposes.
• Communications and support records: Retained for a minimum of two (2) years from the date of the last communication, unless ongoing dispute resolution requires longer retention.
• Technical and log data: Retained for up to twelve (12) months, after which it is aggregated or anonymised for statistical purposes and the source data is deleted.

Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised in accordance with the Company's data deletion procedures. Anonymised data retained for statistical purposes is no longer considered personal data and is not subject to this Policy.

Komslot implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the Komslot platform — look for the padlock icon in your browser address bar when accessing the site;
• Encryption at rest for sensitive data stored on the Company's servers, including KYC documents and financial records;
• Role-based access controls ensuring that only authorised personnel with a legitimate need to access personal data are permitted to do so, with all access logged and auditable;
• Multi-factor authentication options available to users and applied to internal administrative systems;
• Regular security audits and penetration testing conducted by qualified third-party security professionals;
• Incident response procedures in place to detect, investigate, and notify affected parties of data security incidents in a timely manner where required by applicable law.

Komslot uses cookies and similar tracking technologies on the Platform for the purposes described in this Section. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

The Company uses the following categories of cookies:

• Strictly necessary cookies: Essential for the operation of the Platform — for example, maintaining your login session, remembering your language preferences, and ensuring security tokens are active. These cookies cannot be disabled without rendering the Platform non-functional.
• Functional cookies: Used to remember your preferences, such as deposit method defaults and display settings, to provide a more personalised experience on return visits.
• Analytical cookies: Used to collect aggregated and anonymised data about how Users navigate the Platform — including pages visited, time spent, and errors encountered. This data is used solely to improve Platform performance and is not linked to individual User identities.
• Security and fraud-prevention cookies: Used to identify and mitigate potentially fraudulent activity, detect multiple Account creation attempts, and maintain the integrity of the Platform's security systems.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform. The Platform does not currently respond to browser-level "Do Not Track" signals, though we do not use cookies for cross-site advertising or behavioural profiling for commercial purposes.

Subject to applicable data protection law and the Company's legal obligations (including regulatory record-keeping requirements), you have the following rights in relation to your personal data held by Komslot: