Privacy Policy

Privacy Policy Balislot – Your Personal Data Protection

At Balislot, your privacy is not merely a legal obligation – it is a responsibility we take seriously every day. This document clearly explains what types of data we collect, how it is used, who can access it and how you can control your own personal information.

Updated: 1 January 2026
256-bit SSL Encryption
PDPA Full Compliance
24/7 Security Monitoring
0 Third-Party Data Sales
Commitment Data Protection Balislot

Six core principles that guide how we handle your personal data responsibly

Military-Grade Encryption

All your personal and financial data is protected with 256-bit SSL encryption — the same standard used by leading banking institutions and government agencies. Every data transmission between your device and our servers is fully encrypted.

Data Control in Your Hands

You have full rights over your personal data. At any time, you may request to view, update, transfer or delete your data from our records. We will not retain your data if you do not wish us to keep it.

No Third-Party Data Sales

Balislot has never and will never sell, rent or trade your personal data to any third party for marketing or commercial purposes. Your data belongs to you, not to us as a business asset.

Full Malaysia PDPA Compliance

All of balislot's data handling practices fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We adhere to the data protection principles set out by the Department of Personal Data Protection Malaysia.

Minimum Data Collection

We only collect data that is genuinely necessary to provide our services. No excess data is collected simply because it "might be useful in the future". Every type of data we retain has a clear purpose and a defined retention period.

Data Breach Notification

In the event of a data breach involving your personal information, balislot is committed to notifying you within 72 hours of becoming aware of it, in line with international data protection best practices.

Important Note: This Privacy Policy applies to all users of the Balislot platform, including the balislot.biz website and mobile app. By using any of our services, you agree to the data handling practices described in this document.

1 General Information About This Policy

Balislot takes personal data protection responsibilities very seriously. This Privacy Policy is drafted in accordance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA) and explains in detail how we collect, use, store, disclose and protect your personal information while you use our platform.

As a digital entertainment platform serving users in Malaysia, we understand that your trust is the most valuable asset we hold. Every data-related decision is made with our users' best interests and safety as the top priority. We do not treat your personal data as a commodity — it is sensitive information that we handle with the utmost care and responsibility.

This policy applies to all information we collect through the balislot.biz website, the Balislot mobile app, email communications and any other channels you use to interact with us. It does not apply to third-party websites or services that may be linked from our platform.

2 Types of Personal Data We Collect

Balislot collects your personal data through various means – directly when you register or complete a form, automatically through tracking technologies, and sometimes from trusted third-party sources for identity verification purposes.

Data You Provide Directly

  • Registration information: Full name, date of birth, gender, email address and phone number.
  • Identity verification documents (KYC): National identification number, MyKad or passport copy, and other supporting documents required for account verification.
  • Financial information: Bank account details, e-wallet numbers and records of deposit and withdrawal transactions.
  • Communications: Any messages, complaints, or feedback you submit to our support team.
  • Personal preferences: Your preferred language, account settings and notification preferences that you have configured yourself.

Automatically Collected Data

  • Technical data: IP address, device type, operating system, browser type and version.
  • Usage data: Pages visited, games played, session duration, clicks and interactions within the platform.
  • Location data: General geographic location based on IP address for regional regulatory compliance purposes.
  • Cookies and similar technologies: Session information, login preferences and platform usage analytics data.
Data Category Example Requirements
Personal Identity Name, IC, date of birth Mandatory – KYC
Contact Information Email, phone, address Mandatory – Communications
Financial Data Bank account, e-wallet Mandatory – Transactions
Technical Data IP, device, browser Automatic – Security
Usage Data Games, sessions, clicks Automatic – Analytics
Marketing Data Promotional preferences Optional – Consent-Based

3 Purpose of Data Collection and Processing

We only process your personal data where there is a valid legal basis for doing so. The primary purposes for which your data is used are as follows:

  • Account management: Creating, verifying and securely managing your user account.
  • Transaction processing: Processing your deposits, wins and fund withdrawals accurately and promptly.
  • Identity verification (KYC): Ensuring all users meet age eligibility requirements and preventing fraud and money laundering.
  • Platform security: Detecting, investigating and preventing fraudulent activity, account misuse and security threats.
  • Customer support: Responding to inquiries, resolving complaints and providing the technical assistance you need.
  • Legal compliance: Fulfilling legal obligations under the PDPA, anti-money laundering (AML) regulations and reporting requirements to relevant authorities.
  • Service improvement: Analysing usage patterns to improve the platform experience, introduce new features and resolve technical issues.
  • Marketing communications: Sending information about promotions, bonuses and special offers – only if you have provided consent.
Purpose Principle: Balislot will not use your data for any purpose other than those stated above without first obtaining your renewed consent.

4 Data Disclosure to Third Parties

Balislot does not sell or trade your personal data. However, in the course of normal business operations, there are certain situations where your data may need to be shared with trusted parties:

Trusted Service Provider

We work with selected and trusted third-party service providers to support our platform operations, including payment solution providers, KYC verification platforms, cloud infrastructure providers and analytics software vendors. All parties are bound by strict data protection agreements and are only permitted to use your data for purposes we specify.

Legal Obligations

We may disclose your data to government authorities, law enforcement agencies or regulatory bodies when required by Malaysian law or a valid court order. In such situations, we will disclose only the minimum information necessary.

Business Transfers

If balislot is involved in any merger, acquisition, or sale of business assets, user data may be transferred as part of those assets. You will be notified in advance if this occurs, and your rights under the PDPA will continue to be protected.

Reminder: Balislot will never contact you to request your password or financial information through a third party. If you receive any such communication, do not comply and report it to us immediately.

5 Data Security Measures

Balislot continually invests in security infrastructure to ensure your personal data is always protected against unauthorised access, disclosure, alteration or destruction.

  • 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using the latest TLS protocols.
  • Secure password storage: Passwords are stored in hashed form using the strong bcrypt algorithm – no one, including our staff, can view your password in its original form.
  • Two-factor authentication (2FA): You are encouraged to enable 2FA for an additional layer of security on your account.
  • 24/7 security monitoring: Our cybersecurity team continuously monitors systems to detect any suspicious activity.
  • Periodic penetration testing: We conduct regular security audits and penetration testing by independent third-party experts.
  • Internal access controls: Only staff who require access to specific data to perform their duties are permitted to do so, based on the principle of least privilege.
While we take all reasonable precautions, no digital system can be guaranteed 100% secure. We encourage you to play your part by using strong passwords, not sharing your login credentials, and keeping your devices protected with up-to-date security software.

6 Use of Cookies and Tracking Technologies

Balislot uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Cookie Types Purpose Status
Essential Cookies Login, session, security – required for core platform functionality Mandatory
Functional Cookies Saving language preferences, display settings and personal choices Mandatory
Analytics Cookies Understanding how users interact with the platform for improvement purposes Optional
Marketing Cookies Displaying relevant advertisements and promotions based on your interests Optional

You can manage your cookie settings through your internet browser at any time. However, disabling essential cookies may affect platform functionality and your login experience. For optional cookies, you may withdraw your consent without any impact on the core services we provide.

7 Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold:

Right of Access

You have the right to request a copy of all personal data we hold about you at any time.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete data in our records.

Right to Erasure

You may request deletion of your personal data, subject to legal record-keeping obligations.

Right to Data Portability

You have the right to receive your data in a machine-readable format for transfer to another platform.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Right to Restriction of Processing

In certain circumstances, you may request that we temporarily restrict the processing of your data.

To exercise any of the above rights, please contact our Data Protection Officer at [email protected]. We will respond to your request within 30 business days from the date of receipt.

8 International Data Transfers

In some cases, your personal data may be processed or stored on servers located outside Malaysia, particularly when we use cloud service providers or international infrastructure. Such data transfers are only carried out when necessary and are always subject to adequate safeguards.

We ensure that all international data transfers are protected by appropriate safeguarding mechanisms, such as standard data processing agreements, approved contractual clauses or equivalent recognised mechanisms. Your rights under Malaysia's PDPA remain applicable regardless of where your data is physically stored.

9 Data Retention Period

Balislot does not retain your personal data longer than necessary for the purposes stated in this Privacy Policy, or longer than required by Malaysian law.

  • Active account data: Retained for the duration your account is active and for 7 years after account closure, in line with financial legal requirements.
  • Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's Companies Act and AML regulations.
  • KYC documents: Retained for the period stipulated by relevant regulations, typically not less than 5 years.
  • Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
  • Analytics data and cookies: Collected in aggregate and without personal identifiers; retained for a maximum of 2 years.

Once the retention period expires, your data will be securely deleted or anonymized so it can no longer be linked back to you.

10 Children's Privacy

The balislot platform is exclusively for individuals aged 18 and above. We do not knowingly collect, process, or store any personal data from individuals under 18.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account. If you believe we may have inadvertently collected data from a minor, please notify us promptly through our support channels.

Warning: Registration by individuals under 18 is strictly prohibited and constitutes a violation of balislot's Terms and Conditions. Parents and guardians are encouraged to use parental control tools on shared devices to prevent unauthorized access by minors.

11 Contact Our Data Protection Officer

Balislot has appointed a Data Protection Officer (DPO) responsible for ensuring PDPA compliance and handling all privacy-related enquiries. If you have any questions, concerns or requests regarding your personal data, you may contact us through the following channels:

  • Privacy Email: [email protected]
  • General Support Email: [email protected]
  • Live Chat: Available 24/7 via the balislot platform
  • Response Time: We are committed to responding to all privacy inquiries within 5 business days

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), the regulatory body responsible for overseeing PDPA compliance in Malaysia.

12 Amendments to This Privacy Policy

Balislot reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or platform improvements. When we make material changes, we will notify you via your registered email or in-account notification at least 14 days before the changes take effect.

The "Updated" date at the top of this page will always reflect the date of the most recent amendment. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of the balislot platform after any amendment takes effect will be considered your acceptance of the latest version of this Privacy Policy.

This Privacy Policy was last updated on 1 January 2026. If you have any questions regarding the latest amendments, please contact our Data Protection Officer at [email protected].
Play Safe and With Confidence

Your Data Is Protected – Enjoy the Best Gaming Experience at Balislot

With high-standard data protection and full compliance with Malaysia's PDPA, you can play with peace of mind knowing your personal information is always safe with us.

256-bit SSL Encryption Full PDPA Compliance No data sales
Bahasa Melayu