kdslot Privacy Policy

1 Scope and Data Controller Identity

This Privacy Policy applies to all personal data collected and processed by kdslot in connection with the kdslot website (kdslot.biz), the kdslot mobile platform, and all associated gaming, payment, and customer support services (collectively, the "Service").

kdslot is the personal information controller ("Controller") as defined under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations issued by the National Privacy Commission ("NPC"). As Controller, kdslot determines the purposes and means of processing your personal data.

By registering a kdslot account or otherwise using the Service, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein, where consent is the applicable legal basis for the processing.

2 Categories of Personal Data We Collect

kdslot collects the following categories of personal data from users of the Service:

kdslot does not collect sensitive personal information (as defined under Section 3(l) of the DPA) beyond what is strictly necessary for KYC compliance purposes, and such data is handled with enhanced security controls.

3 How We Collect Personal Data

kdslot collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion;
• Automatically through the platform: Technical data such as IP address, device identifiers, browser type, and session activity are collected automatically when you access kdslot;
• From payment processors: When you transact via GCash, Maya, or other payment providers, kdslot receives transaction confirmation data from those processors;
• From identity verification partners: Where third-party KYC verification services are used, those partners provide verification outcomes and associated data to kdslot.

4 Purposes and Legal Basis for Processing

kdslot processes your personal data for the following purposes, each supported by a legal basis under the DPA:

• Account creation and management — necessary for the performance of the service contract between you and kdslot;
• Identity verification (KYC) — necessary for compliance with Philippine anti-money laundering laws (AMLA, RA 9160 as amended) and PAGCOR-aligned compliance obligations;
• Payment processing — necessary for the performance of the service contract, specifically to process deposits and withdrawals to your registered payment methods;
• Fraud prevention and security — kdslot's legitimate interests in maintaining the security and integrity of the platform and protecting all users from fraudulent activity;
• Customer support — necessary for the performance of the service contract and kdslot's legitimate interest in resolving player queries and complaints effectively;
• Responsible gaming compliance — compliance with legal obligations and kdslot's legitimate interest in protecting players from gambling harm;
• Marketing communications — your consent, where given. You may withdraw consent to marketing communications at any time via the account settings page or by contacting support;
• Legal and regulatory compliance — compliance with applicable Philippine laws, including the DPA, AMLA, and any directives issued by the NPC or PAGCOR.

5 Data Retention

kdslot retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, as described in this Privacy Policy, or as required by applicable law.

• Account data: Retained for the duration of the active account relationship and for a period of five (5) years after account closure, as required by Philippine anti-money laundering regulations;
• KYC documents: Retained for a minimum of five (5) years after account closure;
• Transaction records: Retained for five (5) years from the date of each transaction;
• Support communications: Retained for three (3) years from the date of the communication;
• Technical logs: Retained for twelve (12) months from the date of generation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with NPC-prescribed disposal standards.

6 Data Sharing and Disclosure

kdslot does not sell your personal data. kdslot shares personal data only in the following circumstances and only to the extent necessary:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, and other payment service providers receive the minimum data necessary to process your transaction;
• KYC verification partners: Third-party identity verification providers receive identity and document data solely for the purpose of completing KYC checks;
• Game providers: JILI, PG Soft, Pragmatic Play, Evolution Gaming, and other certified game studios receive anonymized session data necessary for game operation and audit purposes;
• Fraud prevention services: Anti-fraud and anti-money laundering service providers may receive behavioral and technical data to support fraud detection;
• Legal and regulatory authorities: kdslot will disclose personal data to Philippine law enforcement, the NPC, PAGCOR, or other competent authorities where required by law, court order, or regulatory directive;
• Corporate transactions: In the event of a merger, acquisition, or restructuring, personal data may be transferred to the successor entity subject to equivalent privacy protections.

All third parties who receive personal data from kdslot are contractually required to maintain data confidentiality, implement appropriate security measures, and use the data only for the stated purpose.

7 International Data Transfers

Some of kdslot's service providers and game platform partners operate servers or processing facilities located outside the Philippines. Where personal data is transferred to a country that has not been designated as providing an adequate level of data protection by the NPC, kdslot implements appropriate transfer mechanisms, including contractual clauses that bind the recipient to data protection standards equivalent to those required under the DPA.

By using the kdslot Service, you acknowledge that your personal data may be processed outside the Philippines subject to these safeguards.

8 Cookies and Tracking Technologies

kdslot uses cookies and similar tracking technologies to operate the platform, enhance user experience, and collect analytical data. The following categories of cookies are used:

• Strictly necessary cookies: Required for authentication, session management, and security. These cannot be disabled without impairing core platform functionality;
• Functional cookies: Store your preferences such as language settings, last-visited game category, and responsible gaming limit settings;
• Analytics cookies: Collect anonymized data on page visits, session duration, and navigation patterns to help kdslot improve the platform. No personally identifiable data is included in analytics reports;
• Fraud prevention cookies: Used to detect anomalous account behavior, multi-accounting attempts, and automated access patterns.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect platform functionality. kdslot does not use third-party advertising or behavioral tracking cookies.

9 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data processed by kdslot:

To exercise any of these rights, submit a written request to kdslot's Data Protection Officer at the contact details provided in Section 14. kdslot will respond within fifteen (15) business days of receiving a valid request. Identity verification may be required before processing certain requests.

10 Security Measures

kdslot implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• Encryption: All personal data is encrypted at rest (AES-256) and in transit (TLS 1.3);
• Access controls: Personal data is accessible only to kdslot staff with a documented need-to-know, governed by role-based access control policies;
• Password security: Account passwords are hashed using bcrypt with appropriate cost factors. kdslot does not store plaintext passwords;
• Two-factor authentication: Optional 2FA is available to all kdslot players and is required for administrative staff access;
• Penetration testing: kdslot's platform undergoes regular third-party penetration testing to identify and remediate security vulnerabilities;
• Incident response: kdslot maintains a documented incident response plan. In the event of a personal data breach posing risk to data subjects, kdslot will notify affected players and the NPC within seventy-two (72) hours of awareness.

11 Children's Privacy and Age Restriction

The kdslot Service is strictly intended for individuals who are 21 years of age or older. kdslot does not knowingly collect personal data from persons under 21 years of age. If kdslot discovers or is notified that it has collected personal data from a person under 21, kdslot will immediately delete that data and close the associated account.

Parents and guardians who believe their child has registered on kdslot should contact the Data Protection Officer immediately using the contact details in Section 14. kdslot will treat such reports as urgent and will act within 24 hours of notification.

Age verification is conducted as part of the KYC process for all kdslot accounts before withdrawal processing is permitted. kdslot may conduct proactive age verification checks at any point during the account lifecycle.

12 Third-Party Links

The kdslot platform does not contain links to external third-party websites for general browsing purposes. Where game providers or payment processors operate components within the kdslot platform environment, those components are governed by the provider's own privacy policies in addition to this Privacy Policy and the applicable data sharing agreements kdslot maintains with those providers.

kdslot is not responsible for the privacy practices of third-party game providers, payment processors, or any external platform that may be accessed independently of kdslot.

13 Updates to This Privacy Policy

kdslot reserves the right to update or amend this Privacy Policy from time to time to reflect changes in legal requirements, platform features, or processing practices. The "Last Updated" date at the top of this policy reflects the date of the most recent revision.

Where a material change is made to this Privacy Policy, kdslot will notify registered players by SMS to their registered mobile number, by email to their registered email address, or by prominent notice on the kdslot website, at least seven (7) days before the change takes effect.

Continued use of the kdslot Service after the effective date of a revised Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to a revised Privacy Policy, you should cease using the Service and contact kdslot to close your account.

14 Contact and Data Protection Officer

For any privacy-related queries, requests to exercise your data subject rights, or to report a privacy concern, please contact kdslot's Data Protection Officer:

• Email: [email protected] — please include "Privacy Request" or "DPO" in the subject line
• Live Chat: Available 24/7 through the kdslot platform — identify yourself as contacting regarding a privacy matter
• Response Time: Privacy requests are responded to within fifteen (15) business days. Urgent security or breach concerns will be treated as priority and responded to within 24 hours.

If you are not satisfied with kdslot's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. Information about how to file a complaint with the NPC is available at the NPC's official website.