sl666 Privacy Policy

This Privacy Policy ("Policy") describes how sl666, the online gambling platform operated at https://sl666.vu ("the Platform", "we", "us", or "our"), collects, processes, stores, and discloses personal data relating to individuals who access, register on, or otherwise interact with the sl666 Platform.

This Policy applies to all personal data collected through the sl666 website and any related communication channels, including live chat, email correspondence, and promotional communications. It applies equally to prospective players who browse the Platform without registering and to fully verified, active account holders.

sl666 is operated primarily for players based in Indonesia. Where this Policy references local context — including Indonesian payment methods such as BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, OVO, DANA, GoPay, ShopeePay, and LinkAja — it does so to provide relevant, practical information for our primary user base. The protections described in this Policy apply to all players regardless of location.

The data controller responsible for your personal data collected through the sl666 Platform is the sl666 operator — the entity that holds the international licence under which the Platform is operated. The data controller is accountable for all decisions regarding the purposes and means of processing personal data in connection with the sl666 service.

For all data-related enquiries, requests, or complaints, you may contact the sl666 Data Protection contact via the support channels set out in Section 15 of this Policy. Our support team includes Indonesian-speaking representatives available 24 hours a day, 7 days a week, and will route your enquiry to the appropriate internal team within one business day.

sl666 collects the minimum personal data necessary to provide a safe, compliant, and high-quality gambling service. The categories of data we collect are set out below.

When you create an sl666 account, we collect your full legal name, date of birth, residential address, email address, and chosen username. This information is used to create and maintain your account, verify your identity, and fulfil our age-verification obligations (21+ only).

To comply with our Know Your Customer (KYC) obligations, we may collect copies of government-issued identity documents (such as an Indonesian National Identity Card / KTP, passport, or driver's licence), selfie photographs, and proof of payment method ownership. These documents are used solely for identity verification and anti-money laundering compliance.

We collect data relating to deposits and withdrawals, including the payment method used (e.g., BCA transfer, OVO, DANA), transaction amounts in IDR, and transaction timestamps. We do not store full bank account passwords or card PINs. Payment instrument references (such as the last four digits of a bank account or a masked e-wallet ID) are retained for reconciliation and fraud prevention purposes.

We collect records of all wagers placed, games played, bet amounts, outcomes, and net session results. This data supports account integrity checks, responsible gaming monitoring, dispute resolution, and platform analytics used to improve the player experience.

When you access sl666, we automatically collect technical data including your IP address, browser type and version, device type, operating system, screen resolution, and session duration. This data is used for fraud detection, security monitoring, and platform optimisation.

When you contact sl666 support — whether via live chat, email, or any other channel — we retain records of those communications, including chat transcripts and email threads. This data supports quality assurance, dispute resolution, and ongoing regulatory compliance.

Where you have opted in to receive promotional communications, we retain your contact details and preferences to deliver relevant offers. You may withdraw consent for marketing communications at any time by updating your account preferences or by notifying sl666 support.

sl666 collects personal data through the following channels and mechanisms:

• Direct collection: Data you provide voluntarily when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a promotional offer.
• Automated collection: Data collected automatically when you access the Platform, including technical and device data captured via server logs, session tracking, and browser-level signals.
• Cookies and similar technologies: First-party cookies and local storage objects used to maintain your login session, remember preferences, and detect suspicious activity. See Section 8 for full details.
• Payment processors: Transaction-level data received from Indonesian payment networks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) when you initiate a deposit or withdrawal.
• Third-party identity verification services: Data from independent KYC or document-verification providers used to cross-check identity documents against authoritative databases during the account verification process.
• Anti-fraud and security services: Signals from third-party fraud intelligence platforms used to assess the risk profile of new registrations and flagged transactions.

sl666 uses personal data strictly for the purposes described below. We do not use your data for any purpose that is incompatible with the purposes listed here without obtaining your prior consent.

• Service delivery: Processing your account registration, facilitating deposits and withdrawals in IDR, settling wagers, and providing customer support.
• Identity and age verification: Confirming that you are at least 21 years of age and that the identity you have provided is genuine, as required by our responsible gaming and compliance obligations.
• Anti-money laundering (AML) compliance: Monitoring transactions for patterns consistent with money laundering, structuring, or other financial crime, and fulfilling our reporting obligations where legally required.
• Fraud prevention and platform security: Detecting, investigating, and preventing fraudulent registrations, multiple accounts, payment fraud, bonus abuse, and unauthorised account access.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and, where appropriate, applying the responsible gaming tools described in our Responsible Gaming Policy.
• Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, user interface design, and customer support processes.
• Promotional communications: Sending offers, bonuses, and event notifications to players who have opted in to receive such communications. You may opt out at any time.
• Legal and regulatory compliance: Fulfilling obligations arising under applicable international licensing requirements, anti-money laundering regulations, and any lawful request from a competent regulatory or law enforcement authority.

sl666 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and sl666 — i.e., to deliver the gambling services you have registered to use, including account management, deposit processing, and wager settlement.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC identity verification, AML transaction monitoring, and data retention mandated by our operating licence.
• Legitimate interests: Processing carried out for purposes that are in the legitimate interests of sl666 or third parties, provided those interests are not overridden by your privacy rights. Examples include fraud prevention, platform security, and improving the quality of our services.
• Consent: Where no other legal basis applies, sl666 will ask for your explicit consent before processing your data. The most common example is the sending of promotional and marketing communications. You may withdraw consent at any time without this affecting the lawfulness of prior processing.

sl666 does not sell your personal data. We share your data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.

We share personal data with carefully selected third-party service providers who assist us in operating the sl666 Platform. These include payment processors (local Indonesian banks and e-wallet platforms), KYC verification providers, fraud detection services, cloud hosting providers, and customer support tooling vendors. All service providers operate under data processing agreements that bind them to handle your data only in accordance with our instructions and this Policy.

Live casino and slot games on the sl666 Platform are powered by third-party studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, PG Soft, and Spribe. These providers may receive technical identifiers (such as an anonymised player session ID) necessary to deliver and settle their games. They do not receive your name, contact details, or payment information.

sl666 will disclose personal data to competent regulatory, law enforcement, or government authorities where required to do so by law, court order, or binding regulatory direction. We will notify you of any such disclosure to the extent permitted by law.

In the event that sl666's business is acquired, merged with, or transferred to another entity, personal data held at the time of transfer may form part of the transferred assets. We will notify affected players in advance of any such transfer and ensure that the receiving entity agrees to honour the protections set out in this Policy.

sl666 uses the following categories of cookies and similar technologies on the Platform:

sl666 does not use third-party advertising cookies or retargeting pixels. You can manage functional and analytics cookie preferences through your account settings. Disabling essential or security cookies is not supported, as they are necessary for the Platform to function securely.

sl666 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law or regulation. The following retention periods apply as a general guide:

• Active account data (identity, contact, gameplay, financial records): retained for the duration of your account's active status plus a minimum of five (5) years following account closure, in compliance with AML regulations.
• KYC documents (identity documents, selfies, proof of payment): retained for a minimum of five (5) years following account closure or the completion of the KYC process, whichever is later.
• Transaction records: retained for a minimum of five (5) years from the date of each transaction to support AML audit trails and regulatory enquiries.
• Customer support communications: retained for a minimum of two (2) years following the resolution of the relevant support interaction.
• Marketing preferences and consent records: retained until you withdraw consent or request deletion, plus a reasonable administrative period thereafter.
• Anonymised analytics data: may be retained indefinitely in aggregated, non-identifiable form for platform improvement purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. If you request deletion of your account and data prior to the expiry of a mandatory retention period, we will restrict processing of your data to compliance-only purposes and delete it as soon as the mandatory period expires.

You have the following rights in relation to the personal data sl666 holds about you. To exercise any of these rights, contact our support team using the details in Section 15. We will respond within 30 days of receiving a verified request.

• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction of processing: You may request that we restrict the processing of your data in certain circumstances — for example, while a data accuracy dispute is being resolved.
• Right to data portability: You may request a structured, machine-readable copy of the personal data you provided to us, where technically feasible.
• Right to object: You may object to processing carried out on the basis of legitimate interests or for direct marketing purposes. We will cease such processing unless we can demonstrate compelling grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

The sl666 Platform is strictly intended for adults aged 21 and over. sl666 does not knowingly collect personal data from any person under the age of 21. Age verification is applied at account registration and at the withdrawal stage as part of our KYC process.

If you are a parent or guardian and believe that a person under the age of 21 has created an sl666 account or provided personal data to us, please contact our support team immediately at [email protected]. We will investigate promptly and, upon confirmation, close the account and securely delete all associated personal data without undue delay.

sl666 employs a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport-layer encryption: All data transmitted between your device and sl666 servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• At-rest encryption: Sensitive data stored in our databases — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorised personnel whose roles require it. All internal access is logged and subject to regular audit.
• Two-factor authentication: sl666 supports and encourages two-factor authentication (2FA) for player account logins to prevent unauthorised access even where credentials are compromised.
• Regular security audits: sl666 conducts periodic penetration tests and vulnerability assessments to identify and remediate security weaknesses before they can be exploited.
• Incident response: sl666 maintains a documented data breach response procedure. In the event of a breach that is likely to result in a high risk to your rights, we will notify affected players without undue delay.

While we take all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying sl666 immediately if you suspect your account has been compromised.

The sl666 Platform does not include links to external third-party websites for general browsing purposes. In the event that any informational or promotional context makes reference to an external brand, service, or resource, sl666 is not responsible for the privacy practices or content of those external entities.

Game studios whose titles are hosted on sl666 (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, and Spribe) operate their own privacy policies governing any data they collect directly through their game interfaces. sl666 encourages players to review those policies independently where relevant.

sl666 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. Where changes are material — affecting how we collect, use, or share your personal data in ways that differ significantly from this version — we will notify you by posting a prominent notice on the sl666 Platform and, where reasonably practicable, by contacting you via the email address or contact method registered on your account.

The effective date displayed at the top of this page indicates when the current version came into force. Your continued use of the sl666 Platform after the effective date of any revision constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you must cease using the Platform and contact our support team to close your account and arrange withdrawal of your Real Money Balance.

The most current version of this Privacy Policy is always available at https://sl666.vu/privacy-policy. We recommend reviewing this page periodically to stay informed of any updates.

For all privacy-related enquiries, data rights requests, or complaints regarding how sl666 handles your personal data, please contact our support team through one of the following channels:

• Live Chat: Available 24/7 via the support widget on the sl666 Platform. Indonesian-speaking agents are available at all times. Reference "Privacy Request" when initiating your chat so we can route your enquiry to the correct team.
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Policy Request" in the subject line and your registered username in the body of your message. We aim to respond to privacy requests within 5 business days and to resolve them within 30 days.

We are committed to resolving all privacy concerns promptly and transparently. If you are not satisfied with our response to a privacy complaint, you may escalate the matter to the relevant data protection authority or to the dispute resolution body designated under sl666's operating licence, as communicated by our compliance team at the time of escalation.