PDPA 2010 Compliance

Komslot Privacy Policy – Personal Data Protection for Every Malaysian User

At komslot, your privacy is not merely a legal obligation — it is a core value we uphold. This document explains in detail how we collect, use, store, and protect your personal data in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and international best practices.

Updated: 1 January 2026
10 Sections
Bahasa Malaysia (ms-MY)
Privacy Protection Score
90%
Data Security
95%
Policy Transparency
95%
PDPA Compliance
Internally assessed & annually independently audited
Komslot's Commitment: Your personal data will never be sold, rented, or shared with third-party advertisers without your consent. This is a commitment we have upheld since day one.
1

Introduction & Scope of This Privacy Policy

This Privacy Policy is issued by Komslot ("we", "the platform", "Komslot") and applies to all users who access or use our online Sports Betting and casino platform at komslot.biz, including via web browser, mobile app, or any digital interface we provide.

This policy describes our privacy practices regarding the processing of your personal data in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia, as well as applicable international standards. komslot takes this responsibility seriously, as we understand that your trust is the foundation of the relationship we build with you.

By registering an account on komslot, accessing the platform, or using any of our services — including betting on Malaysia Super League, EPL, badminton, table games, slots, or Live Casino — you are deemed to have agreed to this Privacy Policy. If you do not agree, please stop using our platform and contact us so we can help you close your account and manage your data.

This policy is supplementary to Terms & Conditions ours. In the event of any conflict between the two documents on privacy matters, this Privacy Policy shall prevail.
2

Types of Personal Data We Collect

Komslot only collects data that is strictly necessary to provide our services safely and effectively. The following are the categories of data we may collect:

Data Category Example Information Collected?
Personal Identity Full name, MyKad/passport number, date of birth, gender Yes
Contact Information Malaysian phone number, email address, residential address Yes
Financial Data Bank account number, bank name, e-wallet details (TNG, GrabPay, Boost) Yes
Account Details Username, login history, account settings, bonus records Yes
Usage Data Betting history, games played, active hours, preferred markets Yes
Technical Data IP address, device type, operating system, browser Yes
Credit Card Number Data Full card number, CVV Not stored
Biometric Data Fingerprint, facial recognition Not collected

Komslot does not collect sensitive data such as your health information, religious beliefs, or political views. We also do not store full credit card numbers — any card payments are processed directly by authorised, PCI DSS-compliant payment operators.

3

How We Collect Your Personal Data

We collect data through a variety of methods depending on how you interact with Komslot:

  • Account registration: When you complete the registration form with your name, email, Malaysian phone number, and other required details.
  • Identity verification (KYC): When you submit documents such as your MyKad or passport to meet legal compliance requirements.
  • Financial transactions: Your bank account or e-wallet details when making deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX (Maybank2u, CIMB Clicks), or direct bank transfer.
  • Platform usage: Activity data such as bets placed, games played, login times, and pages visited are automatically collected by our system.
  • Communications: When you reach out to our customer support team via live chat, email, or WhatsApp, the contents of that session may be stored for training and service improvement purposes.
  • Cookies and tracking technologies: Our platform uses cookies and similar technologies to enhance your experience. See Section 7 for more details.
Important: We will never ask for your account password by phone, email, or any other communication channel. If anyone claims to be from komslot and requests your password, please report it to us immediately.
4

How Your Personal Data Is Used

Komslot uses your personal data only for legitimate and clearly defined purposes. The following are the primary purposes for which your data is used:

  • Account management: Creating, verifying, and maintaining your account on the komslot platform.
  • Transaction processing: Processing deposits and withdrawals via your preferred payment method securely and accurately.
  • Identity verification (KYC/AML): Meeting legal obligations under anti-money laundering and financial compliance laws.
  • Service delivery: Giving you full access to all platform features — Sports Betting on football, table games, slots, Live Casino, and more.
  • Security and fraud prevention: Detecting and preventing fraudulent activity, account misuse, and security threats.
  • Service communications: Sending important notifications related to your account, transactions, changes to terms, or security issues.
  • Marketing (with consent): Sending promotional information, the latest bonuses, and relevant offers — only if you have opted in to receive them.
  • Platform improvements: Analysing aggregated usage data to improve the user experience and develop new features.
  • Legal compliance: To comply with any legal requirements or directives from applicable regulatory bodies.

Komslot does not use your data for automated profiling that has a material negative impact on you, or for any purpose not directly related to the delivery of platform services.

5

Data Sharing with Third Parties

Komslot does not sell, rent, or disclose your personal data to any third party for their marketing or commercial purposes. However, there are limited situations where we may need to share your data:

  • Payment service providers: E-wallet operators (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) and Malaysian banks (for FPX, Maybank2u, and CIMB Clicks processing) receive the transaction data necessary to process your deposits and withdrawals.
  • Technology service providers: Providers of cloud infrastructure, cybersecurity services, and technical platform support — all bound by strict data protection agreements.
  • Regulatory bodies and authorities: When required by Malaysian law or official directives from authorised law enforcement agencies.
  • Game service providers: Casino and slots game providers may receive technical data necessary to ensure games function correctly. They do not receive your personally identifiable information.
All third parties we work with are bound by a data processing agreement which requires them to protect your data to the same high standards as komslot. They may only use your data for the specific purposes set out in that agreement.
6

Data Security & Encryption Measures

Protecting your personal data from unauthorised access, loss, or misuse is our highest technical priority at komslot. We continuously invest in the latest security infrastructure.

  • 256-bit SSL encryption: All data transmitted between your browser or app and Komslot's servers is encrypted using industry-standard TLS/SSL protocols.
  • Data encryption at the storage level: Sensitive data such as identity and financial information is encrypted at rest in our databases — not just during transmission.
  • Two-factor authentication (2FA): We offer — and actively encourage — the use of 2FA on all accounts as an additional layer of security.
  • Internal access control: Only komslot staff with a legitimate business need are permitted to access user data, and all access is logged for audit purposes.
  • 24/7 Monitoring: Our systems are continuously monitored to detect and respond to any security threats.
  • Regular penetration testing: We conduct regular security assessments, including third-party penetration testing, to identify and address vulnerabilities before they can be exploited.
  • PCI DSS Compliance: Our payment processing complies with international payment card industry data security standards.

While we take all reasonable precautions, no system is 100% immune. In the event of a security incident involving your data, we are committed to notifying you within the timeframe required by applicable law.

7

Cookie Policy & Tracking Technologies

The komslot platform uses cookies and similar tracking technologies to enhance the user experience, maintain secure login sessions, and understand how users interact with our platform.

Cookie Type Function Duration Opt-Out Available?
Important Login verification, session security, CSRF prevention Session No
Function Save language preferences, display settings, and favourite markets 30 days Preferences
Analytics Aggregated usage data for platform improvements (anonymised data) 90 days Preferences
Marketing Display of relevant offers based on your interests on the platform 60 days Yes

You can manage your cookie preferences through your browser settings. However, blocking essential cookies may affect platform functionality, such as the ability to log in or place bets.

8

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have the following rights regarding the personal data we hold about you:

Right to Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request the correction of inaccurate or incomplete personal data.
Right to Erasure
Request deletion of your data when it is no longer needed (subject to legal obligations).
Right to Object
Object to the processing of your data for direct marketing purposes at any time.
Right to Restriction
Request a restriction on the processing of your data under certain circumstances.
Right to Data Portability
Receive your data in a structured, machine-readable format.

To exercise any of the rights above, please contact our privacy officer by email at privacy@komslot.biz. We will process your request within 14 working days. In complex cases, this period may be extended to 30 business days with appropriate notice.

9

Data Retention & Deletion Policy

Komslot retains your personal data for as long as your account remains active, and for such period thereafter as is necessary to fulfil legal obligations, resolve disputes, and enforce our agreements.

  • Active account data: Retained for as long as your account remains active.
  • Financial transaction data: Retained for a minimum of 7 years after the transaction date, in line with Malaysia's financial and tax legal requirements.
  • KYC data (identity documents): Retained for a minimum of 5 years after account closure, in accordance with AML/CFT legal requirements.
  • Customer support communication records: Retained for 2 years from the date of interaction.
  • Technical logs (IP, session activity): Retained for 90 days for security and investigative purposes.

Once the retention period has expired and there is no legal obligation requiring further storage, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

When you close your komslot account, we will initiate the data deletion process within 30 days, subject to the mandatory retention periods stated above.
10

How to Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how komslot handles your personal data, please contact our dedicated Privacy Officer:

  • Privacy Email: privacy@komslot.biz
  • General Support Email: support@komslot.biz
  • Live Chat: Available 24/7 via the Komslot platform
  • Response time: 2 business days for general emails; 14 business days for data rights requests

If you are not satisfied with how we have handled your privacy complaint, you have the right to lodge a complaint with Department of Personal Data Protection Malaysia (JPDP) under the Malaysian Ministry of Communications and Digital.

Komslot reserves the right to update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any material changes will be communicated via your registered email or an in-platform notification.

Why Your Privacy Is Safe with Komslot

Six layers of protection we apply to safeguard every Komslot member's data.

256-bit SSL Encryption

All communications between your device and Komslot's servers are encrypted with TLS 1.3 — the same standard used by leading financial institutions worldwide. Your data cannot be read by unauthorised parties during transmission.

Full PDPA 2010 Compliance

Komslot operates in full compliance with Malaysia's Personal Data Protection Act 2010. This means your rights as a data subject — including the right to access, correction, and erasure — are protected under Malaysian law.

No Sale of Data to Third Parties

This is more than just a policy — it is a core commitment of komslot. Your personal data is never sold, rented, or shared with advertisers or external marketing companies. You will not receive unsolicited advertising from third parties as a result of being a komslot member.

Strict Internal Access Controls

Access to user data within the komslot organisation is governed by a strict need-to-know principle. Only staff who require access to carry out their specific duties are permitted, and all access is logged and audited on a regular basis.

Security Incident Notification

In the event of any security incident potentially involving your data, komslot is committed to notifying you within the timeframe required by law. We do not conceal incidents — transparency is one of our core values.

Annual Independent Privacy Audit

Komslot's privacy and data security practices are reviewed by independent third-party auditors at least once a year. These audit reports ensure we consistently meet the highest standards and identify areas for continuous improvement.

Your Data Is Protected. Now It's Time to Play!

Now you know how komslot protects your personal data. Register with confidence today and enjoy football, badminton, table games, slots, and more — with a welcome bonus of up to RM1,000!

🔒 Data protected by 256-bit SSL ✅ PDPA 2010 Compliance 🚫 No sale of data to third parties
Bahasa Melayu