Privacy Policy – slotsk

1. Data Controller

slotsk operates as the data controller in respect of all personal data collected through the slotsk platform at slotsk.app. As data controller, slotsk determines the purposes and means of processing your personal information in connection with its online casino and sports betting services.

All references in this Privacy Policy to "slotsk", "we", "us", or "our" refer to slotsk in its capacity as operator of the slotsk platform and data controller of your personal information. References to "you" or "your" refer to any individual who accesses or uses the slotsk platform, whether as a registered Account holder or a visitor browsing without an Account.

2. Data We Collect

slotsk collects personal data through several channels in the ordinary course of operating its platform. The categories of data we collect include:

2.1 Registration & Account Data

• Full legal name, date of birth, and national identification details (where required for KYC verification).
• Mobile number (including +92 Pakistani mobile numbers) and email address used during registration.
• Username and encrypted password credentials.
• Residential address information provided during account verification or withdrawal processing.

2.2 Identity Verification (KYC) Data

• Copies of government-issued identification documents (such as National Identity Card / CNIC, passport, or driving licence).
• Proof of address documentation.
• Source of funds documentation where required under anti-money laundering obligations.

2.3 Financial & Transaction Data

• Payment method identifiers (JazzCash account numbers, Easypaisa wallet IDs, bank account details for HBL, UBL, Meezan Bank, Bank Alfalah).
• Deposit and withdrawal transaction records including amounts in PKR, timestamps, and processing status.
• Gaming activity records including bets placed, games played, session durations, and win/loss history.

2.4 Technical & Usage Data

• IP addresses, device identifiers, browser type and version, and operating system information.
• Login timestamps, session activity, and navigation patterns within the slotsk platform.
• Geolocation data at the country/region level derived from IP address (used for compliance purposes).

2.5 Communications Data

• Records of support interactions via live chat or email, including your messages and our responses.
• Marketing preference settings and records of promotional communications sent to you.

3. How We Use Your Data

slotsk processes your personal data for the following purposes:

• Account management: To create, maintain, and administer your slotsk Account, including processing logins, balance management, and Account security.
• Service delivery: To provide access to casino games, live dealer tables, sports betting markets, and all other slotsk platform features.
• Payment processing: To process PKR deposits and withdrawals via supported Pakistani payment methods and to reconcile transaction records.
• Identity verification (KYC): To verify your identity and age (18+) as required by anti-money laundering and responsible gaming obligations applicable to slotsk's operating framework.
• Fraud prevention & security: To detect, investigate, and prevent fraudulent activity, Account takeovers, money laundering, and other prohibited conduct.
• Responsible gaming: To monitor gaming patterns for signs of problem gambling, to administer self-exclusion requests, deposit limits, and cooling-off periods, and to comply with responsible gaming obligations.
• Legal & regulatory compliance: To comply with applicable legal and regulatory obligations including record-keeping requirements and responses to lawful authority requests.
• Customer support: To respond to your queries, resolve disputes, and manage complaints.
• Marketing (where consented): To send you promotional offers, bonus notifications, and platform updates where you have opted in to marketing communications. You may withdraw consent at any time via your Account settings.
• Platform improvement: To analyse aggregated, anonymised usage data to improve slotsk's features, user experience, and technical performance.

4. Legal Basis for Processing

slotsk relies on the following legal bases to process your personal data:

• Contractual necessity: Processing required to fulfil slotsk's obligations to you under the Terms & Conditions, including Account administration, payment processing, and service delivery.
• Legal obligation: Processing required to comply with anti-money laundering laws, age verification obligations, and lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing for fraud prevention, security monitoring, responsible gaming analysis, and platform improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing of data for direct marketing purposes, where your explicit opt-in consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Third Parties

slotsk may share your personal data with the following categories of third parties in the following circumstances:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy frameworks and data security obligations.
• Game software providers: Licensed game studios and RNG certification bodies receive session and game data necessary to deliver certified gaming outcomes and to audit RTP compliance.
• Identity verification services: Third-party KYC providers may process your identification documents and biometric data for age and identity verification purposes.
• Fraud and AML screening providers: Specialist anti-fraud and anti-money laundering services may process transaction and identity data to support slotsk's compliance obligations.
• Regulatory and law enforcement authorities: slotsk will disclose personal data to competent authorities where required by law, court order, or regulatory direction, including responses to investigations involving fraud or financial crime.
• IT infrastructure and hosting providers: Cloud hosting and infrastructure providers that host slotsk's platform and data under strict data processing agreements.

All third-party processors engaged by slotsk are required to process your data only in accordance with slotsk's instructions and applicable data protection obligations. slotsk does not authorise processors to use your data for their own independent purposes.

6. Cookies & Tracking Technologies

slotsk uses cookies and similar tracking technologies on its platform for the following purposes:

• Essential cookies: Required for platform functionality including session management, login state, and security. These cannot be disabled without impairing your ability to use slotsk.
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming configurations.
• Analytics cookies: Collect anonymised data on how users navigate and interact with the slotsk platform, used solely to improve the user experience. No personally identifiable data is included in analytics reports.
• Session security cookies: Detect and prevent automated access, bot activity, and session hijacking attempts.

You may manage non-essential cookie preferences through your browser settings. Disabling essential cookies will affect your ability to log in and use slotsk's Services.

7. Data Retention

slotsk retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, including regulatory and legal obligations. Specific retention periods include:

• Account and registration data is retained for the duration of your active Account plus a minimum of five years following Account closure, to comply with anti-money laundering record-keeping obligations.
• Transaction records and financial data are retained for a minimum of five years from the date of the transaction.
• KYC documentation is retained for a minimum of five years following Account closure or the completion of the relevant KYC review process.
• Support communications are retained for three years from the date of the interaction.
• Marketing consent records are retained for the duration of your consent plus three years thereafter as evidence of the consent given.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with slotsk's data destruction procedures. Anonymised or aggregated data may be retained indefinitely for analytical purposes without identifying any individual.

8. Data Security

slotsk implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and slotsk servers.
• Encryption of personal data and financial records at rest within slotsk's database infrastructure.
• Role-based access controls limiting internal access to personal data to authorised personnel with a documented business need.
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent specialists.
• Multi-factor authentication requirements for all internal system access by slotsk staff.

In the event of a personal data breach that poses a risk to your rights and freedoms, slotsk will notify affected users and relevant authorities in accordance with applicable breach notification obligations. slotsk will also take immediate remediation steps to contain and address the breach.

9. Your Rights

Subject to applicable data protection law, you have the following rights in relation to your personal data held by slotsk:

• Right of access: You may request a copy of the personal data slotsk holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to slotsk's overriding legal retention obligations.
• Right to restriction: You may request that slotsk restricts its processing of your data in certain circumstances.
• Right to data portability: You may request that slotsk provides your personal data in a commonly used machine-readable format.
• Right to object: You may object to processing based on slotsk's legitimate interests, and to direct marketing communications at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time via your Account settings or by contacting slotsk support.

To exercise any of these rights, please contact slotsk at the email address set out in Section 13. slotsk will respond to verified requests within a reasonable timeframe in accordance with applicable law. Identity verification may be required before processing rights requests to protect against fraudulent or unauthorised data access.

10. Children's Privacy

11. International Data Transfers

slotsk's platform infrastructure and some third-party service providers may be located outside of Pakistan. Where personal data is transferred internationally, slotsk ensures that appropriate safeguards are in place to protect the security and integrity of your data, including contractual obligations consistent with internationally recognised data protection standards.

Transfers to payment processors operating within Pakistan — including JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah — remain within the domestic jurisdiction. International transfers are limited to infrastructure hosting and specialised compliance services where domestic alternatives are not available.

12. Changes to this Policy

slotsk reserves the right to update this Privacy Policy at any time to reflect changes in its data practices, legal obligations, or platform features. Material changes will be communicated to registered users via email or prominent platform notification at least 7 days before the updated Policy takes effect where practicable. The "Last updated" date at the top of this Policy indicates when the most recent revision was made.

Your continued use of slotsk after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you should close your Account and cease using the platform before the changes take effect.

13. Contact & Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to report a data concern, please contact slotsk's support team. Data-related requests are handled by slotsk's designated privacy contact and will be acknowledged within 5 business days.

Email: [email protected]

When submitting a data rights request by email, please include your full name and the mobile number or email address associated with your slotsk Account so that we can verify your identity and locate your records. Do not include your full password in any email communication.