Cocaslot Privacy Policy – Personal Data Protection Malaysian Players

1. Introduction

Cocaslot respects the privacy of every player and is committed to protecting the personal data you share with us. This Privacy Policy transparently explains how the platform Cocaslot collect, use, store, share, and protect your personal information when you use our services.

We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards. Our goal is to ensure you always have a clear picture of, and meaningful control over, your personal data.

This Privacy Policy applies to all ways you interact with Cocaslot — through our website, any mobile interface, customer support channels, and all services we provide. If you have any questions not addressed in this document, do not hesitate to reach out to our privacy team at support@cocaslot.best.

2. Personal Data We Collect

Cocaslot only collects data that is strictly necessary to deliver our services safely and effectively. Below are the categories of data we collect, along with an explanation of why each is required:

2.1 Information You Provide Directly

• Registration Data: Full name as per MyKad, date of birth, Malaysian mobile number, and email address. This information is required to create your account and verify your identity.
• KYC Documents: A copy of your Malaysian identity card (MyKad), supporting documents for address verification such as a Tenaga Nasional Berhad utility bill or water bill, and a screenshot of the e-wallet or bank account used for deposits.
• Payment Information: E-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay) or FPX bank account numbers (Maybank2u, CIMB Clicks). We do not store credit or debit card numbers directly.
• Communications: The content of live chat conversations, emails, or any written communications you send to our team.

2.2 Automatically Collected Data

• Technical Data: IP address, web browser type, device operating system, screen resolution, and language settings.
• Session Data: Pages visited, time spent on each page, navigation flow, and buttons clicked.
• Game Data: A complete record of all gaming activity, including game type, bet amounts, outcomes, and session duration — required for customer support and the resolution of any disputes.
• Transaction Data: All deposit and withdrawal records, including amounts, payment methods, timestamps, and transaction statuses.

3. How We Use Your Data

The personal data we collect is used for the following purposes, and only for these purposes unless you provide consent for additional use:

3.1 Service Provision
This is the primary purpose of data collection — to enable us to create and manage your account, process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, provide access to all games on the platform, and administer bonus and promotional programmes.

3.2 Identity Verification & Fraud Prevention
Cocaslot is legally required to carry out KYC (Know Your Customer) and AML (Anti-Money Laundering) procedures. Your identity data is used to verify that you are a real, eligible individual, and to detect and prevent fraud, money laundering, or any misuse of the platform.

3.3 Account Security
Technical data such as IP addresses and device information is used to detect logins from unusual locations or devices, enabling our system to alert you if any suspicious access attempts are made on your account.

3.4 Customer Support
Game activity and transaction records allow our support team to accurately and efficiently resolve any queries or disputes you raise.

3.5 Platform Improvements
Anonymised usage data is used to understand platform usage patterns, identify areas for improvement, and make data-driven decisions about new features to develop.

3.6 Marketing Communications
If you have given consent to receive marketing communications, we will use your email address and phone number to send you information about Cocaslot promotions, bonuses, and new features that may interest you. You may withdraw this consent at any time.

4. Data Sharing & Disclosure

Cocaslot does not sell, rent, or trade your personal data to third parties for their own purposes. However, in certain circumstances, we may need to share your data with the following parties:

4.1 Third-Party Service Providers
We work with a carefully selected group of third-party service providers who help us deliver our services — including payment processing providers for Touch 'n Go eWallet, GrabPay, DuitNow, and FPX; game providers such as Pragmatic Play, PG Soft, and Evolution Gaming; and cloud computing and security service providers. All these providers are bound by strict confidentiality agreements and are only permitted to use your data for the purposes we specify.

4.2 Legal Requirements
Cocaslot may be required to disclose your personal data to the relevant authorities when mandated by law, court order, or valid legal process. This includes disclosures to the Royal Malaysia Police (PDRM), Bank Negara Malaysia (BNM), or other regulatory bodies in the context of a lawful investigation.

4.3 Fraud Prevention & Security
In cases of suspected fraud or illegal activity, Cocaslot may share necessary information with other platforms in the industry or recognised fraud prevention bodies to protect the interests of all platform users.

4.4 Business Transfers
In the event of a merger, acquisition, or sale of Cocaslot's business assets, user data may be transferred as part of those assets. You will be notified in advance should this occur, and any acquiring party will be bound by the same or equivalent privacy protections.

5. Data Security

Cocaslot continuously invests in security infrastructure to ensure your personal data is protected against unauthorised access, modification, disclosure, or destruction.

Technical Security Measures

• SSL/TLS Encryption: All communications between your browser and Cocaslot's servers are encrypted using TLS 1.3 with 256-bit SSL.
• Data Encryption at Rest: Sensitive data stored in our databases is encrypted using the AES-256 algorithm.
• Access Controls: Our role-based access control (RBAC) system ensures that only staff who require access to specific data are permitted to view it.
• 24/7 Monitoring: Our real-time security monitoring system automatically detects and responds to any suspicious activity.
• Regular Security Audits: Penetration testing and independent security audits are conducted regularly by third-party security firms.
• Two-Factor Authentication (2FA): 2FA is available to all user accounts and is mandatory for internal staff access.

While we take all reasonable precautions, no security system can guarantee absolute 100% protection. As such, you also play an important role in keeping your account secure — particularly by keeping your password and login credentials confidential.

6. Data Retention & Deletion

Cocaslot retains your personal data for as long as necessary for the purposes outlined in this policy, or as required by applicable law.

General Retention Period

• Active Account Data: Retained for the duration of your active account with Cocaslot.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, as required under Malaysian tax and AML laws.
• KYC Records: Retained for a minimum of 5 years after the business relationship ends, in accordance with AMLA (Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001) requirements.
• Communication Records: Retained for 2 years for customer support and dispute resolution purposes.
• Cookie Data: Depending on the cookie type — from session duration (session only) to a maximum of 2 years for preference cookies.

When data is no longer needed and there is no legal obligation to retain it, Cocaslot will securely delete or anonymise it.

7. Your Rights Under the PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Cocaslot:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information within 21 business days.
• Right to Rectification: If you find that your data is inaccurate or incomplete, you have the right to request a correction. You may also update much of your profile information directly through your account settings.
• Right to Withdraw Consent: For data processed on the basis of your consent (such as email marketing), you may withdraw that consent at any time. Withdrawal does not affect the validity of any processing carried out prior to the withdrawal.
• Right to Object to Processing: You have the right to object to the processing of your data for certain purposes, especially for direct marketing.
• Right to Erasure: Under certain circumstances, you may request the deletion of your personal data. Each request will be assessed against our legal obligations — where there is a legal requirement to retain the data, we may not be able to fulfil the request in full.

To exercise any of the rights above, contact us at support@cocaslot.best with the subject line "Privacy Rights Request" and specify which right you wish to exercise along with your account details. We will respond within 21 business days of receiving your request.

8. Cookies & Tracking Technologies

Cocaslot uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your browser when you visit a website.

Types of Cookies We Use

• Essential Cookies (Required): Required for core platform functionality — login, active game sessions, and security. These cookies cannot be disabled without affecting how the platform operates.
• Preference Cookies: Saves your preferences such as language selection and display settings for a more personalised experience.
• Analytics Cookies: Collects anonymised usage data to help us understand how players use the platform and identify areas for improvement. This data does not personally identify you.
• Marketing Cookies: With your consent, these cookies allow us to show you content more relevant to your interests. You can decline these cookies without affecting your use of the platform.

You can manage cookie settings through your browser preferences. Please note that disabling essential cookies may affect the functionality of the Cocaslot platform. For guidance on managing cookies in popular browsers such as Chrome, Firefox, or Safari, refer to your browser's help section.

9. Cross-Border Data Transfers

In the context of providing online casino services, some of your data may be processed by service providers or servers located outside Malaysia — for example, international game providers such as Evolution Gaming or Pragmatic Play may process your game session data on their servers, which may be located in Europe or other locations.

When your data is transferred outside Malaysia, Cocaslot ensures adequate protection through one of the following mechanisms: data transfer agreements incorporating recognised standard data protection clauses; transfers to countries with an adequate level of data protection; or other protective mechanisms recognised under applicable law.

10. Children's Privacy

Cocaslot is a platform designed exclusively for individuals aged 18 and above. We do not knowingly collect personal data from children or minors under the age of 18.

Cocaslot's registration process requires date-of-birth verification, and our KYC procedure requires identity verification that confirms a player's age. Any account suspected of belonging to a minor will be suspended immediately, and data collected during that registration process will be deleted once the investigation is complete.

If you believe that someone under the age of 18 may have registered an account on Cocaslot or provided their data to us, please contact us immediately at support@cocaslot.best and we will take appropriate action.

11. Privacy Policy Amendments

Cocaslot reserves the right to update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or evolving industry standards. Any material amendments to this policy will take effect once the updated version is published on this page with a revised update date.

For changes we consider material and likely to significantly affect how we process your data, we will endeavour to provide clearer notice — for example, via an in-platform notification or an email to the address registered on your account.

We recommend reviewing this page periodically — at least once every six months — to stay informed about how we manage your personal data. Your continued use of the Cocaslot platform after any amendments constitutes acceptance of the updated privacy terms.

12. Contact Us for Privacy Inquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Cocaslot handles your personal data, please contact us through the following channels:

• Privacy Email: support@cocaslot.best (Please include "Privacy Enquiry" in the email subject line)
• Live Chat: Available 24/7 on the Cocaslot platform — the fastest option for urgent enquiries
• Response Time: We will acknowledge receipt of your enquiry within 2 business days and provide a substantive response within 21 business days.

If you are not satisfied with how we have handled your privacy inquiry, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.