This Privacy Policy sets out how Slothacker collects, uses, stores, and protects your personal data. We handle your information with care and do not sell it to third parties. By using the Slothacker platform, you agree to the practices described in this document.
A plain-English summary of our most important data practices. The full legal text below governs in all cases.
Slothacker does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your information stays within our controlled environment and trusted service partners only.
We collect only the personal data that is strictly necessary to operate your Account, process transactions, comply with KYC obligations, and provide customer support. We do not collect data speculatively.
All data in transit is encrypted using TLS 1.3. Data at rest is protected using AES-256 encryption. Access to personal data is restricted to authorised personnel on a strict need-to-know basis.
You have the right to access, correct, and request deletion of your personal data. You can also object to certain types of processing or request a portable copy of your data at any time.
We use cookies strictly for session management, fraud prevention, and platform analytics. We do not use third-party advertising cookies or behavioural tracking pixels from external ad networks.
Personal data is retained only for as long as legally required or operationally necessary. KYC documents are retained for a minimum of five years post-Account closure to satisfy anti-money-laundering obligations.
This Privacy Policy ("Policy") describes how Slothacker ("the Platform", "we", "us", "our"), operating at https://slothacker.cam, collects, uses, stores, discloses, and otherwise processes personal data relating to individuals who register accounts, make deposits, use gaming services, contact support, or otherwise interact with the Platform ("Players", "Users", "you").
Slothacker is committed to handling personal data responsibly, lawfully, and in accordance with applicable international data protection principles. This Policy is designed to be transparent and readable — we have written it in plain English wherever possible without sacrificing legal precision.
This Policy should be read alongside Slothacker's Terms & Conditions, which govern the overall contractual relationship between the Platform and its Players. By creating a Slothacker Account or continuing to use the Platform following notification of any update to this Policy, you acknowledge that you have read and understood this document and consent to the processing of your personal data as described herein.
For the purposes of this Policy, the following definitions apply:
Any information that identifies or could reasonably be used to identify a living individual, either alone or in combination with other data. Examples include your full name, email address, Malaysian mobile number, MyKad number, IP address, and device identifiers.
Any operation performed on personal data, including collection, recording, storage, use, disclosure, transfer, amendment, restriction, or deletion.
The entity that determines the purposes and means of processing personal data. For data collected through the Slothacker Platform, the Data Controller is Slothacker.
A third party that processes personal data on behalf of Slothacker, under contract, and solely in accordance with Slothacker's instructions. Examples include payment processing partners, cloud infrastructure providers, and KYC verification service providers.
A subset of personal data warranting heightened protection, including government-issued identification document numbers (MyKad, passport), financial account details, and information relating to health or problem-gambling status where voluntarily disclosed through the responsible gambling tools.
Identity verification documents and associated data collected for Know Your Customer compliance purposes, including copies of identity documents, proof of payment method ownership, and source-of-funds declarations.
Slothacker collects personal data across several categories, depending on how you interact with the Platform:
| Category | Examples | When Collected |
|---|---|---|
| Registration Data | Full name, email address, date of birth, Malaysian mobile number, chosen username | At Account registration |
| KYC & Identity Data | MyKad or passport copy, selfie verification, proof of address (where required) | Before first withdrawal; upon enhanced due diligence review |
| Financial Data | Payment method type, masked account identifiers, transaction amounts, deposit and withdrawal history | During deposits and withdrawals |
| Technical Data | IP address, device type and OS, browser type and version, session tokens, geolocation (country-level) | Automatically during Platform use |
| Gaming Activity Data | Games played, wager amounts, session duration, win/loss records, bonus usage history | Continuously during gameplay |
| Communications Data | Live chat transcripts, support email content, complaint records, survey responses | When you contact support or respond to communications |
| Responsible Gambling Data | Self-exclusion status, deposit limits set, cool-off period activations, self-assessment responses | When using responsible gambling tools |
Slothacker collects personal data through the following means:
Slothacker processes your personal data for the following purposes:
To create, maintain, and manage your Slothacker Account, including processing login sessions, managing account preferences, and communicating account-related information.
To verify your identity, confirm that you are aged 21 or above, comply with international anti-money-laundering (AML) obligations, and detect and prevent fraud. KYC processing is a legal obligation, not optional.
To process deposits and withdrawals via your chosen payment method (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, or cryptocurrency), verify transaction legitimacy, and maintain accurate financial records.
To deliver gaming services, calculate and credit winnings, apply bonus terms, maintain game history records, and personalise your experience within the Platform.
To detect suspicious account activity, prevent multiple-account creation, identify potential bonus abuse, monitor for match-fixing indicators in sportsbook markets, and protect the Platform and its users from harm.
To track the use of responsible gambling tools you activate, monitor for behavioural indicators of problem gambling where you have consented to such monitoring, and enforce self-exclusion and cool-off periods you have requested.
To send you information about Slothacker promotions, bonuses, and relevant updates, where you have consented to receive such communications. You may withdraw consent at any time by updating your communication preferences in your Account settings.
To comply with our obligations under applicable international licensing requirements, anti-money-laundering regulations, and law enforcement requests made through lawful process.
Slothacker processes personal data on the following legal bases, consistent with internationally recognised data protection principles:
Slothacker does not sell your personal data. We share personal data only in the following limited circumstances:
Slothacker's primary server infrastructure is located outside of Malaysia. As a result, your personal data may be transferred to and processed in jurisdictions outside your country of residence, including countries that may not offer the same level of data protection as Malaysia or the European Economic Area.
Where such transfers occur, Slothacker implements appropriate safeguards to ensure that your personal data remains protected to a standard consistent with this Policy, including:
Slothacker retains personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable legal obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account Registration Data | Duration of Account + 5 years post-closure | AML legal obligation |
| KYC & Identity Documents | Minimum 5 years post-Account closure | AML / regulatory obligation |
| Financial Transaction Records | 7 years from transaction date | Financial record-keeping obligation |
| Gaming Activity Logs | 3 years from the session date | Legitimate interests / dispute resolution |
| Support Communications | 3 years from the last communication | Legitimate interests / complaint handling |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Compliance with consent obligations |
| Self-Exclusion Records | Indefinitely (permanent self-exclusion) | Responsible gambling obligation |
Following expiry of the applicable retention period, personal data is securely deleted or permanently anonymised. Anonymous, aggregated data derived from personal data may be retained indefinitely for statistical and analytical purposes.
Slothacker implements a layered security architecture to protect personal data against unauthorised access, accidental loss, destruction, or alteration. Key security measures include:
Slothacker uses cookies and similar technologies to operate the Platform and improve your experience. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:
Essential for the Platform to function correctly. These include session authentication cookies, fraud prevention tokens, and load-balancing identifiers. These cookies cannot be disabled without breaking core Platform functionality.
Used to understand how Players navigate the Platform, which games are most popular, and where technical errors occur. Data collected is aggregated and anonymised. These cookies help us improve the Platform experience for all Malaysian players.
Remember your Platform preferences, such as language settings, game display options, and recently viewed game categories, so you don't have to reset them on each visit.
We do not use third-party advertising or behavioural tracking cookies. You can manage your cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the Platform.
Subject to applicable law and certain exceptions, you have the following rights with respect to your personal data held by Slothacker:
You may request a copy of the personal data Slothacker holds about you, along with information about how it is used and with whom it has been shared.
You may request correction of any inaccurate or incomplete personal data. You can update certain Account details directly via your Account settings; for corrections to identity documents, contact the support team.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent. This right is subject to overriding legal obligations — for example, KYC and financial records must be retained for the periods stated in Section 9.
You may request that Slothacker restrict processing of your personal data in certain circumstances — for example, while a rectification request is being resolved, or while you contest the lawfulness of processing.
Where processing is based on consent or contractual necessity and carried out by automated means, you may request a machine-readable copy of your personal data for transfer to another service provider.
You may object to processing based on Slothacker's legitimate interests. You may also withdraw consent to direct marketing at any time via your Account communication preferences or by contacting support.
To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Subject Request". We will acknowledge your request within 72 hours and provide a substantive response within 30 calendar days. Complex requests may take up to 90 days, in which case we will notify you of the extension.
Slothacker's services are strictly for individuals aged 21 years and above. We do not knowingly collect personal data from any person under 21. Our registration process includes mandatory age declaration and KYC age verification before withdrawals are permitted.
If Slothacker becomes aware that personal data has been collected from a person under 21, we will take immediate steps to close the Account, return any deposited funds to the original payment method where technically possible, void any winnings, and permanently delete the personal data of the underage individual from our systems.
If you believe that a person under 21 has registered an Account on Slothacker, please notify us immediately at [email protected]. We take underage gambling prevention extremely seriously and will act on credible reports without delay.
The Slothacker Platform does not contain links to third-party websites for commercial or advertising purposes. Where links to external resources appear — for example, on the Responsible Gambling page referencing support organisations — those external sites operate under their own independent privacy policies, for which Slothacker accepts no responsibility.
Game content delivered by third-party game providers within the Platform's game lobby is rendered within a controlled environment. Slothacker does not permit game providers to independently track your personal data beyond what is shared with them under the data-sharing arrangements described in Section 7 of this Policy.
Slothacker reserves the right to amend this Privacy Policy at any time. Material changes — particularly those affecting the purposes for which your data is processed, the categories of data collected, or your rights — will be communicated to registered Players via email and/or on-platform notification at least ten (10) calendar days before the changes take effect.
Non-material changes (such as clarifications of existing provisions, updates to contact information, or correction of typographical errors) may be made without advance notice. The current version of this Policy, together with the effective date and version number, is always accessible at https://slothacker.cam/privacy-policy.
Your continued use of the Platform following notification of a material change constitutes acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using the Platform and contact support to close your Account.
If you have any questions, concerns, or complaints about this Privacy Policy or about how Slothacker handles your personal data, please contact us using the following details:
Email: [email protected]
Subject line: "Privacy Policy Enquiry" or "Data Subject Request"
Response time: acknowledgement within 72 hours; full response within 30 calendar days.
Slothacker has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection obligations. The DPO can be reached via the same email address above with the subject line "Attention: Data Protection Officer".
Available 24 hours a day, 7 days a week. For urgent privacy concerns — such as suspected unauthorised access to your Account — live chat is the fastest way to reach the team.
For matters relating to your gambling Account terms, please refer to Slothacker's Terms & Conditions. For responsible gambling support and self-exclusion, visit our Responsible Gambling page.
Your personal data is protected under a robust privacy framework. Slothacker is built for Malaysian players who want a fair, transparent, and secure online gaming experience. For players aged 21 and above only.
▶ 21+ ONLY | PLAY RESPONSIBLY | YOUR DATA IS NEVER SOLD