slot39 Privacy Policy – How We Protect Your Personal Data

1 Who We Are

slot39 operates the online gaming platform available at https://slot39.ws, providing casino games, sports betting, live dealer games, and related entertainment services primarily to players in Pakistan. For the purposes of this Privacy Policy, slot39 is the data controller responsible for the personal information collected from users of the platform.

Our registered contact for data protection matters is our support team, reachable at support@slot39.ws. If you have a specific privacy concern that you would prefer to escalate formally, please address it to "Data Protection — slot39" in the subject line of your email and it will be directed to the appropriate person.

This policy covers all personal data processing activities conducted by slot39 in connection with the operation of the platform. It does not cover the privacy practices of third-party services that may be linked to or integrated with the platform — such as payment processors or identity verification providers — each of which operates under their own independently published privacy policies.

2 Data We Collect

slot39 collects personal data in the following categories. We have been deliberate about limiting collection to what is genuinely necessary for the services we provide.

When you create a slot39 account, we collect your full name, date of birth, email address, mobile phone number, and your chosen username. This information is required to create and maintain your account and cannot be reduced without affecting your ability to use the platform.

In accordance with our anti-money-laundering obligations and the age verification requirements described in our Terms and Conditions, we collect a copy of your CNIC (Computerised National Identity Card) and a live verification photograph taken at the time of submission. This data is used exclusively for identity verification and is handled by our certified verification partner under strict data processing agreements.

We collect records of all deposits, withdrawals, and transaction amounts processed through your slot39 account. We do not store full payment method credentials (such as complete card numbers or full Easypaisa/JazzCash account details beyond what is needed for transaction matching). Payment processing is handled by our certified payment gateway partners who maintain their own PCI-DSS compliant data handling practices.

We maintain records of your gameplay activity including game sessions, bet history, win and loss records, and in-game actions. This data serves multiple purposes: it is required for dispute resolution (if you contest the outcome of a game, we need the record), it feeds into our responsible gaming monitoring systems, and it is used in aggregate for platform improvement purposes.

When you access slot39, we automatically collect certain technical data including your IP address, device type and operating system, browser type and version, session timestamps, and approximate geographic location derived from your IP address. This data is used for security purposes, fraud prevention, and to ensure the platform functions correctly across different devices and networks.

If you contact slot39 support via email, live chat, or any other channel, we retain records of those communications. This is necessary for quality assurance, for following up on unresolved issues, and for maintaining an accurate record of commitments made by slot39 to individual players.

3 How We Use Your Data

slot39 uses personal data for the following specific purposes. We do not use personal data for purposes beyond those listed here without obtaining your prior consent or being required to do so by law.

• Account Management: creating and maintaining your account, authenticating your identity when you log in, and enabling access to all platform features.
• Payment Processing: processing deposits and withdrawals, reconciling transaction records, and handling chargebacks or payment disputes.
• Identity Verification and Compliance: verifying that you meet the minimum age requirement of 18 years, confirming your identity for anti-money-laundering compliance, and maintaining records required by relevant financial regulations.
• Security and Fraud Prevention: detecting and preventing unauthorised access to accounts, identifying fraudulent activity, investigating suspicious transactions, and maintaining the integrity of the platform for all players.
• Responsible Gaming: monitoring gameplay patterns to identify potential signs of problem gambling, operating the responsible gaming tools described in our Terms and Conditions, and proactively engaging with players who may need support.
• Customer Support: responding to your queries, resolving disputes, investigating complaints, and maintaining a record of interactions for quality assurance purposes.
• Platform Improvement: using aggregated and anonymised data to understand how the platform is being used, identify areas for improvement, and develop new features. This analysis does not involve individual-level personal data in identifiable form.
• Legal Obligations: maintaining records required by applicable law, responding to lawful requests from regulatory or law enforcement authorities, and defending or prosecuting legal claims where necessary.
• Communications: sending transactional notifications (deposit confirmations, withdrawal processing updates, security alerts) and, where you have opted in, promotional communications about slot39 offers and updates.

4 Legal Basis for Processing

slot39 processes personal data on the following legal bases depending on the type of processing activity:

• Contract Performance: Processing necessary to fulfil the agreement between slot39 and the player — operating your account, processing payments, delivering game results.
• Legal Obligation: Processing required to comply with applicable anti-money-laundering regulations, age verification requirements, financial record-keeping laws, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform stability, and responsible gaming monitoring — where these interests are not overridden by your rights as a data subject.
• Consent: Processing for non-essential communications (promotional emails, SMS, push notifications) where you have explicitly opted in. This consent can be withdrawn at any time without affecting processing conducted on other legal bases.

5 Data Sharing No Selling

slot39 does not sell, rent, or trade your personal data to any third party for their own commercial use. Data is shared with third parties only in the following specific and limited circumstances:

Easypaisa, JazzCash, NayaPay, SadaPay, and our banking partners receive transaction data necessary to process your deposit and withdrawal requests. These providers operate under their own privacy policies and are bound by data processing agreements with slot39 that restrict them to using shared data only for payment processing purposes.

Our certified identity verification partner receives CNIC data and verification photographs for the purpose of confirming your identity. This provider is bound by a strict data processing agreement that prohibits use of submitted data for any purpose other than identity verification on slot39's behalf.

Cloud hosting, database management, security monitoring, and similar technical infrastructure services may involve limited data exposure to technology service providers. All such providers are selected on the basis of their security certifications and are contractually bound to data confidentiality standards at least as stringent as those set out in this policy.

slot39 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, a valid legal order, or where slot39 reasonably believes disclosure is necessary to prevent serious harm, protect the rights of third parties, or investigate potential criminal activity connected to the platform.

In the event of a merger, acquisition, or sale of all or part of slot39's business, player data may be transferred as part of that transaction. In such circumstances, players will be notified at least 30 days in advance of any material change to the data controller responsible for their data, and will be offered the opportunity to close their account and request data deletion before the transfer takes effect.

6 Cookies & Tracking Technologies

slot39 uses cookies and similar tracking technologies on the platform. A cookie is a small text file stored on your device that helps the platform recognise your browser and remember information about your session.

These cookies are required for the platform to function and cannot be disabled. They enable your login session to persist, maintain your game state if you navigate between pages, and protect against cross-site request forgery attacks. No personal data stored in essential cookies is shared with third parties.

slot39 uses aggregated analytics to understand how the platform is being used — which pages are visited most, where players experience technical difficulties, and how the platform performs across different devices and connection speeds. Analytics data is collected in aggregate form and does not identify individual players.

Certain cookies store session security tokens that help slot39 detect and prevent fraudulent login attempts, account takeover attacks, and automated bot activity. These cookies are considered essential for platform security.

You can control non-essential cookies through your browser settings. Disabling cookies entirely may affect the functionality of the slot39 platform — in particular, login persistence and game state may be impaired. Most modern mobile browsers allow granular cookie management from settings.

7 Data Retention Clear Periods

slot39 retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Account Data (name, contact details, login records): retained for the duration of your active account and for a period of five years following account closure, to satisfy financial record-keeping obligations and to handle any post-closure disputes or legal claims.
• Identity Verification Documents (CNIC, verification photographs): retained for the duration of your active account and for five years following closure or the date of last transaction, whichever is later, as required by anti-money-laundering regulations. Securely and irreversibly destroyed at the end of this period.
• Transaction Records: retained for a minimum of seven years following each transaction in accordance with financial compliance requirements. After this period, records are anonymised or deleted.
• Gameplay History: retained for the duration of the account and for two years following closure. Game logs for disputed rounds are retained until the dispute is fully resolved and for one year thereafter.
• Support Communications: retained for three years following the date of the last interaction in the relevant support thread.
• Device and Technical Data (IP logs, session data): retained for 90 days for security monitoring purposes, then deleted. Aggregated and anonymised technical data derived from this period may be retained indefinitely for platform improvement purposes.

When retention periods expire, data is either securely deleted or irreversibly anonymised so that it can no longer be linked to any individual. Deletion requests submitted by players under their right to erasure (see Section 9) are processed within 30 days, subject to any overriding legal retention obligations.

8 Security Measures

slot39 takes data security seriously and invests continuously in the technical and organisational measures necessary to protect your personal information from unauthorised access, disclosure, alteration, or destruction.

• Encryption in Transit: all data transmitted between your device and slot39's servers is encrypted using TLS 1.3 with 256-bit AES encryption — the same standard used by major international financial institutions.
• Encryption at Rest: sensitive personal data stored on slot39's servers — including identity documents and financial records — is encrypted at rest using AES-256.
• Access Controls: access to personal data within slot39's operations is restricted on a strict need-to-know basis. Staff access is logged, monitored, and reviewed regularly. Access rights are removed immediately upon any change in role or employment status.
• Two-Factor Authentication: two-factor authentication is available for all player accounts and is strongly recommended. All internal slot39 staff accounts with access to player data require 2FA as mandatory.
• Penetration Testing: slot39 engages independent security specialists to conduct periodic penetration testing of the platform and its infrastructure. Identified vulnerabilities are remediated according to a risk-prioritised schedule.
• Incident Response: in the event of a data breach that is likely to result in risk to player rights or freedoms, slot39 will notify affected players within 72 hours of becoming aware of the breach, providing information about the nature of the incident and the steps being taken to address it.

9 Your Rights Over Your Data

As a slot39 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact support at support@slot39.ws with "Data Rights Request" in the subject line. All requests are acknowledged within 48 hours and actioned within 30 days.

10 Children's Privacy 18+ Only

slot39 is an adult entertainment platform. No person under the age of 18 is permitted to register or use the platform. slot39 does not knowingly collect personal data from anyone under 18 years of age.

If you are a parent or guardian and believe that a minor may have accessed slot39 or provided personal data to the platform, please contact us immediately at support@slot39.ws. Upon confirmation, we will immediately close the account, void all gaming activity, return any deposited funds to the original payment source, and delete all personal data associated with the account from our systems.

slot39 employs age verification measures at the withdrawal stage and may request verification at any point during account use. Our responsible gaming team is specifically trained to identify and act on any indicator that a platform user may be a minor.

11 Responsible Gaming and Personal Data

slot39's responsible gaming programme requires the collection and monitoring of gameplay data. This is one area where data collection that might otherwise feel intrusive is directly in the interest of the player concerned. Specifically:

• Gameplay data including session duration, frequency of play, deposit patterns, loss rates, and betting behaviour is monitored continuously by automated systems configured to identify patterns associated with problem gambling.
• Where such patterns are identified, they may trigger automated interventions (session time reminders, responsible gaming prompts) or a personal outreach from our support team.
• Responsible gaming tool settings — including any deposit limits, self-exclusion periods, or cooling-off periods you have applied to your account — are recorded and maintained as part of your account profile. These records are not shared outside slot39 except where required by law.
• If you choose to self-exclude from slot39, your name and contact details may be shared with other licensed gaming operators for cross-platform exclusion purposes where such a system is available and you have explicitly opted into it.

The responsible gaming data processing described above is conducted on the basis of legitimate interests — specifically, slot39's interest in promoting responsible gambling and protecting players from harm, which we consider a compelling legitimate interest that is not overridden by player data rights given the protective purpose it serves.

For full details of slot39's responsible gaming tools and policies, visit the Responsible Gaming page.

12 Changes to This Privacy Policy

slot39 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to how we communicate our privacy standards.

When material changes are made — changes that affect how your personal data is used or your rights in relation to it — we will notify you at least 14 days in advance via the email address registered to your account before the changes take effect. The updated policy will be published on this page with an updated "Last Updated" date.

For minor updates that do not materially affect the substance of the policy (such as formatting improvements or clarifications of existing practices), we may simply update the page without advance notification, though the updated date will always reflect the most recent change.

13 Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or how slot39 handles your personal data, please get in touch using the contact details below. We are committed to resolving privacy-related queries promptly and transparently.

• Email: support@slot39.ws — use "Privacy Policy" in the subject line to ensure it reaches the right person.
• Live Chat: available 24/7 from any page when logged into your slot39 account.
• Languages: English and Urdu.
• Response time: Privacy-related queries are acknowledged within 48 hours and fully addressed within 30 days. For urgent concerns (suspected data breach, suspected unauthorised account access), live chat is the fastest route.

Related documents that form part of slot39's overall data and compliance framework:

• Terms and Conditions — the full agreement governing your use of slot39.
• Responsible Gaming Policy — tools and resources for safe, responsible play.
• FAQ — answers to common questions about accounts, payments, and gameplay.