Your Privacy Matters: Slotku processes personal data only to the extent necessary to provide you with a secure, compliant, and personalized betting experience. We do not sell your personal information to any third party for their own marketing purposes. By using the slotku platform, you acknowledge that you have read and understood this Privacy Policy.
1. Overview
This Privacy Policy applies to all personal data processed by slotku in connection with the operation of the platform accessible at https://slotku.cam (the "Platform"), including all related mobile applications and customer support channels. It applies to all registered users, prospective users, and visitors to the Platform, with particular reference to individuals residing in Indonesia.
Slotku acts as the data controller in respect of personal data collected through the Platform. This means we determine the purposes and means by which your personal data is processed. Where we engage third-party service providers to process data on our behalf, those parties act as data processors and are bound by strict contractual data protection obligations.
This Privacy Policy should be read in conjunction with our Terms & Conditions, which contain additional provisions relevant to your account and the services we provide.
2. Definitions
The following definitions apply throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, identification number, location data, online identifiers, or factors specific to that person's identity. |
| "Processing" | Any operation performed on personal data, whether automated or manual, including collection, recording, storage, alteration, retrieval, use, disclosure, restriction, erasure, or destruction. |
| "Data Subject" | The individual to whom the personal data relates — in this context, you as a registered user or visitor to the slotku Platform. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data — slotku in respect of data collected via the Platform. |
| "Data Processor" | A third party that processes personal data on behalf of the data controller under a written data processing agreement. |
| "Cookies" | Small text files placed on your device by the Platform to facilitate functionality, analytics, personalization, and security. |
| "KYC" | Know Your Customer — the identity and address verification process required for all accounts. |
3. Data We Collect
Slotku collects personal data across several categories, depending on your level of interaction with the Platform:
3.1 Identity and Contact Data
- Full legal name as it appears on your government-issued identification document
- Date of birth (to verify the 21+ age requirement)
- Residential address in Indonesia (city, province, postal code)
- Email address and mobile phone number
- Government-issued ID number (KTP number, passport number, or SIM number)
3.2 Financial Data
- Bank account details for deposit and withdrawal processing (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Permata Bank, BSI)
- E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja account numbers or registered phone numbers)
- Transaction history including deposit amounts, withdrawal amounts, and timestamps in IDR (Rp)
- Card details where Visa or Mastercard is used — stored only in tokenized form via our PCI-DSS compliant payment processor
3.3 Gaming Activity Data
- Betting history across all product verticals (sports, live casino, slot games, togel markets)
- Session duration, login timestamps, and session frequency
- Bonus claims, wagering progress, and promotion participation records
- Responsible gaming tool settings (deposit limits, self-exclusion status, session limits)
3.4 Technical and Device Data
- IP address and geolocation data (country, city-level)
- Device type, operating system, and browser version
- Unique device identifiers and advertising IDs
- Platform interaction logs (pages visited, features used, errors encountered)
3.5 Communications Data
- Records of all customer support interactions via live chat, email, or telephone
- Correspondence relating to disputes, complaints, or responsible gaming requests
- Survey responses and voluntary feedback submissions
Minimization Principle: Slotku collects only the personal data that is necessary for the specific purposes described in this Policy. We do not collect sensitive categories of personal data (such as racial origin, political opinions, or health data) unless directly relevant to a responsible gaming assessment and provided voluntarily by you.
4. How We Collect Your Data
Slotku collects personal data through the following channels:
- Direct submission: Information you provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, or contacting support.
- Automated collection: Technical data collected automatically when you access the Platform, including cookies, server logs, and analytics tools.
- Third-party sources: Identity verification data obtained from licensed KYC providers for document authentication; fraud-risk data from financial screening services; payment confirmation data from our banking and e-wallet partners.
- Publicly available sources: In li mited circumstances, publicly available information (such as sanctions lists or adverse media) may be consulted as part of our AML due diligence obligations.
5. Legal Basis for Processing
Slotku processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing activity:
| Legal Basis | When It Applies |
|---|---|
| Contractual Necessity | Processing required to fulfil our obligations under the Terms & Conditions — including account registration, payment processing, bet settlement, and customer support. |
| Legal Obligation | Processing necessary to comply with applicable law — including KYC/AML verification, record-keeping obligations, and responses to lawful regulatory requests. |
| Legitimate Interests | Processing pursued for slotku's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement analytics — where those interests are not overridden by your fundamental rights. |
| Consent | Processing based on your freely given, specific, informed consent — primarily for optional marketing communications. You may withdraw consent at any time by contacting support. |
6. How We Use Your Data
Slotku uses the personal data it collects for the following specific purposes:
6.1 Account Management
To create, maintain, verify, and administer your slotku account, including processing your registration, authenticating your identity at login, and managing account preferences and responsible gaming tool settings.
6.2 Payment Processing
To process deposits and withdrawals via your chosen payment method — including local Indonesian bank transfers (BCA, BRI, BNI, Mandiri), e-wallets (OVO, DANA, GoPay, ShopeePay, LinkAja), and international cards (Visa, Mastercard) — and to maintain a complete and auditable transaction history denominated in IDR (Rp).
6.3 Regulatory Compliance and AML
To fulfil our obligations under applicable anti-money-laundering (AML) and counter-terrorist financing (CTF) regulations, including conducting KYC verification, screening against international sanctions lists, monitoring transaction patterns for suspicious activity, and maintaining records for the legally mandated retention period.
6.4 Fraud Prevention and Platform Security
To detect and prevent fraudulent activity — including unauthorized account access, multi-accounting, bonus abuse, and use of automated betting tools — and to protect the integrity of the Platform and the fairness of markets including sports betting, live casino, slot games, and togel (Indonesia's traditional numbers lottery) offerings.
6.5 Responsible Gaming
To monitor gaming behavior for indicators of problem gambling, to enforce responsible gaming tool settings you have activated (deposit limits, self-exclusion, session limits), and to reach out proactively where our algorithms detect patterns that may indicate gambling-related harm.
6.6 Customer Support
To respond to your enquiries, resolve disputes, and maintain records of support interactions for quality assurance and compliance purposes. Our support team is staffed by Indonesian-speaking and English-speaking agents available from 07:00 to 23:00 WIB.
6.7 Service Improvement and Analytics
To analyze aggregated, anonymized usage data to improve Platform performance, identify technical issues, develop new features, and personalize your betting and gaming experience. Individual-level behavioral data used for personalization is processed under our legitimate interests basis and is not shared with third parties for their own purposes.
6.8 Marketing Communications
Where you have provided explicit consent, to send you promotional offers, bonus announcements, and news about new games or features via email or SMS. You may opt out of marketing communications at any time by following the unsubscribe link in any marketing email or by contacting our support team.
7. Data Sharing and Disclosure
7.1 With Service Providers
Slotku shares personal data with carefully vetted third-party service providers who process data on our behalf under written data processing agreements that impose obligations equivalent to those in this Policy. These providers include:
- Payment processors and banking partners: To facilitate deposit and withdrawal transactions via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, Visa, and Mastercard networks.
- KYC and identity verification providers: To authenticate government-issued documents and confirm the identity and age (21+) of registered users.
- Game studios: Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Pocket Games Soft receive session tokens to facilitate gameplay — they do not receive your full identity or financial data.
- Fraud prevention and cybersecurity providers: To monitor for and respond to security threats, unauthorized access attempts, and suspicious transaction patterns.
- Cloud infrastructure providers: To host the Platform and its data on secure, access-controlled servers.
- Analytics providers: To process anonymized or pseudonymized usage data for Platform improvement purposes.
7.2 With Regulatory and Law Enforcement Authorities
Slotku will disclose personal data to competent regulatory bodies, law enforcement agencies, or other government authorities where we are legally required to do so or where disclosure is necessary to protect the rights, property, or safety of slotku, our users, or third parties. Such disclosures are made strictly in accordance with applicable legal requirements and are limited to the data necessary for the specific purpose of the request.
7.3 Business Transfers
In the event that slotku undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via email and/or a prominent Platform notice in advance of any such transfer and of any changes to how your data will be processed as a result.
7.4 No Sale of Personal Data
Slotku does not sell, rent, or lease your personal data to any third party for that third party's own marketing or commercial purposes. This prohibition applies regardless of the monetary consideration involved.
Our Commitment: Every third party with whom slotku shares personal data is subject to a written data processing agreement or equivalent contractual safeguard. We conduct due diligence on all processors before engagement and review these arrangements periodically.
8. Cookies & Tracking Technologies
8.1 What We Use
The slotku Platform uses cookies and similar tracking technologies — including web beacons, pixel tags, and local storage objects — to deliver core functionality, enhance your experience, and gather analytics data.
8.2 Types of Cookies
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Enable core Platform functions — login sessions, wallet balance display, bet slip management. Cannot be disabled without impairing functionality. | Session / up to 30 days |
| Functional | Remember your preferences — language settings, odds format, responsible gaming reminders, and previously viewed game categories. | Up to 12 months |
| Analytics | Collect anonymized data on page visits, feature usage, and error rates to improve Platform performance and user experience. | Up to 24 months |
| Marketing | Track campaign effectiveness and, where consent has been granted, serve relevant promotional content based on your gaming interests. | Up to 12 months |
8.3 Managing Cookies
You may control cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies; however, disabling strictly necessary cookies will impair your ability to use core Platform features including account login and payment processing. Detailed instructions for managing cookies in major browsers are available via each browser's help documentation.
9. Data Retention
Slotku retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The following standard retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | Duration of account + 5 years post-closure | AML regulatory requirement |
| KYC documents | Duration of account + 5 years post-closure | AML regulatory requirement |
| Financial transaction records | Duration of account + 5 years post-closure | AML regulatory requirement |
| Gaming activity history | Duration of account + 3 years post-closure | Legitimate interests / dispute resolution |
| Customer support records | 3 years from date of interaction | Legitimate interests / dispute resolution |
| Marketing consent records | Until consent is withdrawn + 1 year | Legal obligation (consent audit trail) |
| Analytics data (anonymized) | Up to 24 months | Legitimate interests |
When the applicable retention period expires, personal data is securely deleted or anonymized in a manner that prevents re-identification. In the event of an ongoing legal dispute or regulatory investigation, relevant data is retained until the matter is fully resolved, after which standard deletion procedures are applied.
10. Data Security
Slotku implements a comprehensive, layered security framework to protect your personal data against unauthorized access, alteration, disclosure, and destruction. Our key security measures include:
- 256-bit SSL/TLS encryption across all data transmitted between your device and our servers — the same standard used by major international financial institutions.
- AES-256 encryption at rest for all sensitive data stored on our servers, including identity documents and financial account details.
- Multi-factor authentication (MFA) available to all user accounts and mandatory for all internal administrative access.
- Strict role-based access controls ensuring that staff members can access only the personal data necessary for their specific job function.
- Continuous security monitoring using intrusion detection systems, anomaly detection, and 24/7 security operations oversight.
- Regular penetration testing conducted by independent cybersecurity specialists to identify and remediate vulnerabilities before they can be exploited.
- PCI-DSS compliant payment infrastructure for all card-based transactions processed via Visa and Mastercard networks.
Security Reminder: No digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. Slotku will never ask for your password via email, live chat, or phone. If you suspect your account has been compromised, contact us immediately at [email protected].
10.1 Data Breach Response
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected individuals, slotku will notify affected users without undue delay — and in any event within 72 hours of becoming aware of the breach — providing details of the nature of the incident, the data affected, the likely consequences, and the measures taken or proposed to address the breach.
11. Your Data Rights
As a data subject, you hold the following rights in respect of the personal data that slotku holds about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a valid request.
Right of Access
Request a copy of the personal data slotku holds about you, along with information on how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data held about you.
Right to Erasure
Request deletion of your personal data where retention is no longer justified — subject to our legal retention obligations.
Right to Restriction
Request that we restrict processing of your data in certain circumstances, such as while a rectification request is under review.
Right to Portability
Receive your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
Right to Object
Object to processing based on legitimate interests — including profiling for personalization purposes — at any time.
Withdraw Consent
Where processing is based on your consent (e.g., marketing), withdraw that consent at any time without affecting prior processing.
Automated Decision-Making
Request human review of any decision made about you solely by automated means that produces a significant effect on you.
Please Note: Certain rights are subject to conditions and exceptions. For example, the right to erasure does not apply where retention is required by law (such as AML record-keeping obligations). We will always explain the basis for any limitation on a right when responding to your request.
12. Minors and Under-Age Protection
The slotku Platform is strictly restricted to individuals who are at least 21 years of age. We do not knowingly collect, process, or retain personal data from any individual under the age of 21. Age verification is a mandatory step during account registration and KYC, and accounts where age cannot be confirmed are suspended pending verification.
If slotku becomes aware that personal data has been collected from an individual under the age of 21, that data will be immediately deleted, the account will be permanently closed, any associated balance will be returned to the funding source, and the matter may be referred to relevant authorities. If you have reason to believe that a minor has registered on the Platform, please report this to us immediately at [email protected].
13. International Data Transfers
Slotku operates internationally and may transfer your personal data to countries outside Indonesia in connection with the services provided by our third-party processors — including cloud hosting providers and game studios. Where such transfers occur, slotku ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied in Indonesia, including:
- Standard contractual clauses incorporated into data processing agreements with overseas processors.
- Transfer only to countries or organizations that maintain an adequate level of data protection as assessed by slotku's data governance team.
- Binding corporate rules where transfers occur within a corporate group.
By using the slotku Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Indonesia, subject to the safeguards described above.
14. Changes to This Privacy Policy
Slotku reserves the right to update or modify this Privacy Policy at any time. Material changes — those that significantly affect how we process your personal data or the rights available to you — will be communicated to registered users via email to the address on file at least 14 days before the revised Policy takes effect. Non-material updates (such as typographical corrections or clarifications that do not alter the substance of the Policy) will take effect upon publication.
The "Last Reviewed" date at the top of this Policy indicates when the current version was last updated. We encourage you to review this Policy periodically to stay informed of how slotku protects your data. Your continued use of the Platform following notification of a material change constitutes your acceptance of the revised Privacy Policy.
15. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which slotku processes your personal data, please contact our Data Protection team using the details below. All data rights requests and privacy enquiries should be submitted in writing via email for documentation purposes.
Data Protection & Privacy Enquiries:
Email: [email protected]
Subject line: "Privacy Policy Enquiry" or "Data Rights Request"
Response time: Within 30 days of receipt of a valid written request
General Customer Support:
Email: [email protected]
Hours: 07:00 – 23:00 WIB, Monday to Sunday
Languages: Indonesian and English
We take all privacy-related communications seriously and aim to acknowledge receipt of your enquiry within 2 business days. Complex data rights requests — particularly subject access requests involving large volumes of data — may require the full 30-day period for a complete response.