PDPA 2010 Malaysia Compliant

Islot Privacy Policy — Your Data Is Safe & Protected Fully

Islot takes the privacy and security of Malaysian members' personal data very seriously. This Privacy Policy clearly explains how we collect, use, store and protect your information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

islot's Privacy Commitment
Our core data protection principles
256-bit SSL encryption for all data
Fully compliant with Malaysia's PDPA 2010
No third-party data sharing without consent
You have the right to access, correct and delete your data
Financial information is encrypted and not stored on islot's servers

Islot's Six Data Protection Principles

The core principles that shape how islot manages the personal data of every Malaysian member

Full Transparency
islot is committed to being fully transparent about the data we collect and how it is used. You will never be caught off guard by how we handle your information — everything is clearly set out in this Privacy Policy, and you are welcome to ask us anything at any time.
Purpose-Based Collection
islot only collects data that is strictly necessary to provide Sports Betting and online casino services to Malaysian members. We do not collect excessive or irrelevant data. Every type of data collected serves a specific purpose.
Top-Tier Security
All data stored by islot is protected with banking-grade 256-bit SSL encryption. islot's servers are monitored around the clock by a cybersecurity team and automated threat detection systems to keep every Malaysian member's data secure at all times.
You're in Control
As an islot member, you have full rights over your personal data. You may access, correct or request deletion of your data at any time. islot provides a straightforward process for exercising your PDPA rights by emailing support@islot.run.
No Sharing Without Consent
islot does not sell, rent or share your personal data with third parties for marketing or commercial purposes without your explicit consent. Data is only shared with selected service providers that support islot's operations and are bound by strict confidentiality agreements.
PDPA 2010 Compliance
islot's Privacy Policy and all our data management practices are fully aligned with Malaysia's Personal Data Protection Act 2010 (PDPA). We regard legal compliance not merely as an obligation, but as our responsibility to every islot member in Malaysia.
Document Information

This Privacy Policy is effective from 1 January 2026. By registering or using the islot platform, you confirm that you have read and agree to this Privacy Policy. This Policy should be read together with islot Terms & Conditions.

1Introduction

Islot (operated under the domain islot.run) is an online Sports Betting and casino platform serving adult players in Malaysia. We understand that your trust in us depends not only on the quality of our services, but also on how we handle the personal information you entrust to us.

This Privacy Policy explains in detail how islot collects, uses, stores, protects, and in certain circumstances shares the personal information of members using the islot platform. It applies to all islot services, including Sports Betting (Malaysian Super League, EPL, BWF badminton, e-sports), Live Casino, slots, virtual sports, and all other platform functions.

Note: This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). If you have any questions about its contents, please contact us at support@islot.run.

2Personal Data We Collect

Islot collects several categories of personal data in order to provide and improve our services to Malaysian members. The following are the types of data we collect:

Registration & Account Data
Full name Email address Phone number Date of birth Password (encrypted) State / city
Financial & Transaction Data
Payment methods (TnG, GrabPay, etc.) Deposit history in MYR Withdrawal history in MYR Bank account details (for withdrawals)
Platform Activity Data
Sports betting history Casino game history Account activity log Support communications
Technical Data
IP address Device type & operating system Browser type Usage & navigation data

Sensitive Financial Information: islot does not store your full credit or debit card numbers, e-wallet PINs, or online banking passwords on our servers. All financial transactions are processed through authorised third-party secure payment gateways.

3How islot Uses Your Data

Islot uses collected data solely for the following legitimate and necessary purposes:

  • Service Delivery: To process account registration, deposits and withdrawals in MYR, settle Malaysian Super League or EPL sports bets, run Live Casino and slots games, and support all other islot platform functions.
  • Identity Verification: To verify member age (minimum 18 years) and identity in compliance with Malaysian legal requirements, including anti-money laundering (AML) measures.
  • Security & Fraud Prevention: To detect and prevent fraudulent activity, multi-account usage, player collusion, and any other misuse of the islot platform.
  • Service Communications: To send important account-related notices, transaction confirmations, terms updates and other essential islot information.
  • Customer Support: To help resolve enquiries, complaints and requests submitted to the islot support team via email or live chat.
  • Platform Improvement: To analyse how members use the islot platform in order to improve the user experience, introduce new features and resolve technical issues.
  • Responsible Gaming: To monitor usage patterns and identify members who may need support related to responsible gaming, in line with our policy islot Responsible Gaming.
  • Marketing Communications (With Consent): To send promotional information, bonus offers and islot news to members who have consented to receiving such communications. You may withdraw this consent at any time.

4Data Storage & Retention Period

Islot stores your personal data on secure, protected servers. The following outlines our data retention policy:

  • Active account data is retained for as long as your islot account remains active and is used to provide services to you.
  • Once an account is closed, islot retains the necessary records for the minimum period required under Malaysian law — typically 7 years for financial records, for legal compliance and audit purposes.
  • Technical data and usage logs are retained for a shorter period — typically between 12 and 24 months — depending on islot's security and operational requirements.
  • Once the retention period has ended, data will be securely deleted or anonymised in accordance with data protection best practices.

Even if you request deletion of your data, islot may be required to retain certain records mandated by Malaysian law, such as financial transaction records for audit and anti-money laundering compliance purposes.

5Sharing Data with Third Parties

Islot does not sell or rent your personal data to any party. However, we may share data in the following limited circumstances:

  • Payment Service Providers: Required transaction data is shared with certified payment processors that facilitate deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX Maybank2u or CIMB Clicks. All these providers are bound by strict confidentiality agreements.
  • Game Provider: Minimum necessary technical data is shared with licensed game providers such as Evolution Gaming and Pragmatic Play for the operation of Live Casino and slots on the islot platform.
  • Legal Requirements: islot may disclose data if required by a court order, Malaysian regulatory authority or legitimate law enforcement agency in the course of an official investigation.
  • islot Rights Protection: Data may be disclosed to protect islot's rights, assets or the safety of other members in cases of suspected fraud or illegal activity involving the islot platform.

All third parties that receive data from islot are bound by data processing agreements ensuring they handle your information to the same high data protection standards that islot upholds.

6Data Security

Islot implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction or disclosure:

  • 256-bit SSL Encryption: All communications between your browser and islot's servers are encrypted using 256-bit SSL technology — the same security standard adopted by Malaysia's major banking institutions.
  • Two-Factor Authentication: islot offers two-factor authentication (2FA) for an extra layer of account protection. We encourage all Malaysian members to enable this feature.
  • 24-Hour Monitoring: islot's cybersecurity team continuously monitors its systems to detect and respond to any security threats or suspicious activity.
  • Internal Access Controls: Access to member data within islot is restricted to staff who genuinely require it to carry out their duties, based on the principle of least privilege.
  • Regular Security Audits: islot conducts regular security assessments and penetration testing to identify and remediate any security vulnerabilities before they can be exploited.

While islot takes extensive security measures, no system can guarantee 100% security on the internet. You are also responsible for keeping your account secure by not sharing your password and using a strong, unique password for your islot account.

7Cookies & Tracking Technologies

Islot uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit islot.run.

  • Essential Cookies: Cookies required for core islot platform functions such as login, session security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Cookies that collect anonymous information about how members use islot, helping us improve platform performance and usability.
  • Functional Cookies: Cookies that remember your preferences — such as favourite sports, selected markets and display settings — to deliver a more personalised experience on islot.
  • Managing Cookies: You can manage or disable cookies through your browser settings. However, disabling certain cookies may affect the functionality of some parts of the islot platform.

8Your Rights Under PDPA 2010

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data islot holds about you:

Right of Access
You have the right to request a copy of the personal data islot holds about you. We will provide this information within a reasonable timeframe.
Right to Correction
If the personal data islot holds about you is inaccurate or outdated, you have the right to request a correction by updating your account information or contacting us.
Right to Erasure
You may request the deletion of your personal data, subject to our legal obligations to retain certain records such as financial records.
Right to Object
You have the right to object to the processing of your data for direct marketing purposes. You may unsubscribe from islot marketing communications at any time.
Right to Data Portability
You have the right to receive your personal data in a machine-readable format for transfer to another service provider where applicable.
Right to Restrict Processing
Under certain circumstances, you have the right to request that islot restrict the processing of your data while a dispute or enquiry is being resolved.

To exercise any of the rights above, contact the islot privacy team by email at support@islot.run and state your request clearly. We will respond within 14 business days.

9Children's Data

The islot platform is exclusively for adults aged 18 and above. islot does not knowingly collect or process personal data of individuals under the age of 18.

  • If islot discovers that data belonging to a child under 18 has been collected without valid consent, that data will be deleted immediately and the associated account will be closed.
  • Parents or guardians who believe their child has registered for or used the islot platform should contact us immediately at support@islot.run for follow-up action.

islot takes child protection very seriously. The platform, games and betting content on islot are not suitable for and are strictly prohibited to anyone under the age of 18.

10Privacy Policy Amendments

Islot reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or new islot platform features:

  • Material amendments will be communicated to members via email or a prominent notice on the islot platform at least 7 days before the changes take effect.
  • Continued use of the islot platform after the effective date of any amendment will be considered your acceptance of the updated Privacy Policy.
  • The "Last Updated" date at the top of this document indicates when this Privacy Policy was most recently revised.
  • If you disagree with any amendments made, you have the right to close your islot account before the changes take effect by contacting support@islot.run.

11Contact Us About Privacy

If you have any questions, concerns or requests regarding islot's Privacy Policy or how we handle your personal data, please contact us:

  • Email: support@islot.run — for all privacy inquiries, data access requests, and security concern reports
  • Live Chat: Available on the islot platform 24 hours a day, 7 days a week for immediate assistance in Bahasa Malaysia
  • Response Time: We aim to respond to all written enquiries within 3 business days and PDPA rights requests within 14 business days.

You also have the right to lodge a complaint with Malaysia's Department of Personal Data Protection if you believe islot has violated your rights under PDPA 2010. That said, we encourage you to reach out to us first so we can address your concerns directly.

Islot Data Security Layers

Islot takes a layered security approach to ensure every Malaysian member's personal data is protected from every angle. This is not just a statement — it is a real security system operating 24 hours a day.

256-bit SSL Encryption
All data transmitted between your device and islot's servers is fully encrypted. No one can intercept or read your information in transit.
Data Storage Encryption
Sensitive data stored in islot's databases — including passwords and financial information — is encrypted using one-way hashing algorithms that cannot be decrypted.
Strict Access Controls
Only authorised and verified islot staff may access member data, and only the data relevant to their specific responsibilities.
Real-Time Monitoring
islot's anomaly detection system monitors account activity in real time and sends immediate alerts upon detecting suspicious patterns or unauthorised access attempts.
Data Backup & Recovery
islot data is automatically and regularly backed up to a secure, separate location to ensure data availability and integrity even in the event of an unexpected technical incident.

Your Responsibility in Protecting Your Privacy

The security of your islot account does not rest on islot's measures alone. You also play an important role:

Use a Strong Password

Choose a password that is unique, lengthy and combines letters, numbers and symbols. Do not reuse the same password across other accounts.

Enable Two-Factor Authentication

Enable 2FA in your islot account settings for an additional layer of protection. This makes unauthorised access significantly harder, even if someone else knows your password.

Never Share Your Login Credentials

Islot will never ask for your password via email, phone, or live chat. Do not share your login credentials with anyone, including family or friends.

Review Your Account Activity Regularly

Check your islot account login history and transaction records from time to time. If you notice any activity you do not recognise, contact support@islot.run immediately.

Sign Out When Done

Always log out of your islot account after each session, especially when using a shared device or public WiFi network.

Your Privacy – islot's First Priority in Every Decision

When you register an islot account and start betting on Malaysian Super League matches or playing at a live casino table, you are entrusting us with your personal information. islot does not take that trust lightly. This Privacy Policy is more than a legal formality — it reflects islot's core values and our commitment to respecting the rights of every Malaysian member who chooses our platform.

Many players ask: why does islot need to collect my data directly? The answer is straightforward. To process your deposits via Touch 'n Go eWallet or GrabPay, we need to verify your identity. To ensure EPL football or BWF badminton betting winnings are credited to the correct account, we need to maintain transaction records. To prevent abuse such as multiple account usage or fraudulent activity that could affect every islot member's experience, we need to monitor activity patterns. Every piece of data islot collects has a clear and legitimate purpose — not collected for its own sake.

Payment issues are among the most frequently raised privacy concerns by Malaysian members. islot wants to state this clearly: we do not store your credit card numbers, e-wallet PINs or online banking passwords on islot's servers. When you make a deposit via Boost, ShopeePay or DuitNow, the transaction is processed directly by a certified secure payment gateway. islot only receives confirmation that the transaction was successful — not your sensitive payment details. This means that even in the highly unlikely event of a data breach at islot, your sensitive payment information would not be exposed.

If you have ever been concerned about unwanted marketing, islot has you covered. We only send marketing communications — about football bonus offers, badminton promotions or live casino promotions — to members who have explicitly opted in during registration. If at any time you no longer wish to receive promotional emails or notifications from islot, you can easily unsubscribe using the "Unsubscribe" link at the bottom of any of our marketing emails, or by contacting support@islot.run. Your request will take effect within 5 business days and we will fully respect that choice.

As for cookies, islot uses them for purposes that genuinely benefit you as a user. Imagine if every time you logged into islot, the platform forgot that you prefer to see Malaysia Super League football odds first, or that you browse in Bahasa Malaysia — the experience would become unnecessarily frustrating. Cookies allow islot to remember your preferences, keep your login session secure and ensure the platform runs smoothly. We do not use cookies to track your activity outside of the islot.run platform.

Your rights under Malaysia's PDPA 2010 are real and available to every islot member. If at any point you want to know what data islot holds about you, you can submit a data access request to support@islot.run. We will provide a summary of your data within a reasonable timeframe. If any of it is inaccurate — perhaps an old phone number or an outdated address — you can request a correction and we will update it. If you close your islot account and wish to have your data deleted, we will honour that request subject to any applicable legal record-retention obligations.

One thing islot wants to make absolutely clear is that we have never sold, and will never sell, Malaysian members' personal data to any third party for marketing or commercial purposes. Your data is not a tradeable commodity. When islot works with service providers such as payment processors or game providers, data sharing is limited strictly to what is necessary for the operation of those services, and all third parties are bound by strict confidentiality agreements and are required to uphold the same data protection standards as islot itself.

Ultimately, privacy is not a static matter — it must evolve alongside changes in technology, legislation and the way the islot platform operates. We are committed to reviewing this Privacy Policy regularly and notifying you of any significant changes. The trust of over 500,000 islot members across Malaysia is something we take very seriously, and your privacy is the most important part of that trust.

Questions About islot's Privacy Policy?

Contact the islot privacy team by email at support@islot.run for any enquiries, data rights requests or security concern reports. You may also refer to Frequently Asked Questions, Terms & Conditions or Responsible Gaming us for further information.

Bet with Confidence — Your Data Is Fully Protected at islot

Register an islot account today and enjoy Super League sports betting, EPL, badminton, and Live Casino with full peace of mind. 256-bit SSL encryption, fully PDPA 2010 compliant, with easy deposits via TnG, GrabPay, or DuitNow from as little as RM10.

Bahasa Melayu