slo100 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by slo100 ("slo100", "we", "us", "our") and applies to all personal data collected from individuals ("Player", "User", "you") who register for, access, or use the slo100 online casino and sports betting platform available at slo100.ws and any associated subdomains or mobile interfaces.

slo100 understands that privacy matters deeply to our players across Pakistan — from Karachi to Lahore, Islamabad to Faisalabad. We take our obligations as a data handler seriously and have designed our data practices to be clear, fair, and proportionate. By registering a slo100 account or using any part of the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside the slo100 Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference.

2. Data Controller

For the purposes of this Privacy Policy, slo100 acts as the data controller in respect of all personal data collected through the Platform. As data controller, slo100 determines the purposes and means by which personal data is processed.

Where slo100 engages third-party service providers to process personal data on its behalf — such as KYC verification partners, payment processors, or fraud detection services — those parties act as data processors under contractual obligations consistent with this Policy and applicable data protection law.

All data-related inquiries, access requests, correction requests, and complaints should be directed to the slo100 Data Support team. Contact details are provided in Section 15 of this Policy.

3. Data We Collect

slo100 collects the following categories of personal data from players:

Category	Examples	Purpose
Identity Data	Full name, date of birth, CNIC number, passport number, photograph	Account registration, KYC verification, age verification
Contact Data	Email address, mobile number, residential address	Account communications, transaction notifications, support
Financial Data	JazzCash/EasyPaisa account reference, bank account details (HBL, UBL, Meezan), USDT wallet address	Deposit and withdrawal processing, fraud prevention
Transaction Data	Deposit amounts, withdrawal amounts, wagering history, bonus usage, game sessions	Account management, regulatory reporting, responsible gaming monitoring
Technical Data	IP address, device type, browser type, operating system, session timestamps	Security, fraud prevention, platform optimisation
Usage Data	Pages visited, games played, features accessed, click patterns	Platform improvement, personalisation, responsible gaming indicators
Communications Data	Live chat transcripts, support emails, feedback submissions	Support resolution, quality assurance, dispute handling

slo100 does not collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, except where a player voluntarily discloses such information in the context of a responsible gaming self-assessment or a support interaction.

4. How We Collect Your Data

slo100 collects personal data through the following means:

• Direct submission: Data you provide when completing the slo100 registration form, submitting KYC documents, making deposits or withdrawals, contacting support, or completing any other form on the Platform.
• Automated technologies: Data collected automatically when you access or use the Platform, including cookies, log files, session tracking, and device fingerprinting used for security and fraud prevention purposes.
• Third-party KYC providers: Identity and address verification data returned by our regulated KYC partners when you submit verification documents for account approval.
• Payment processors: Transaction status and reference data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT TRC20 blockchain networks in connection with deposits and withdrawals.
• Fraud and risk systems: Device reputation data, IP geolocation data, and behavioural signals processed by our fraud detection infrastructure to protect the integrity of the Platform.

5. How We Use Your Data

slo100 uses your personal data for the following purposes:

• To create, verify, and manage your slo100 player account.
• To process deposits and withdrawals via your chosen payment method, including JazzCash, EasyPaisa, and bank transfers.
• To conduct mandatory Know Your Customer ("KYC") and Anti-Money Laundering ("AML") identity verification as required by our gaming licence obligations.
• To fulfil our responsible gaming obligations, including monitoring for indicators of problem gambling, applying player-requested limits, and facilitating self-exclusion requests.
• To communicate with you regarding your account, transactions, promotions you have opted into, and platform updates.
• To detect, investigate, and prevent fraudulent activity, collusion, bonus abuse, and other prohibited conduct as defined in the slo100 Terms & Conditions.
• To improve and personalise the slo100 platform, including game recommendations and interface optimisation.
• To comply with applicable laws, regulations, and lawful requests from regulatory or law enforcement authorities.
• To resolve player disputes and maintain records of support interactions for quality assurance purposes.

6. Legal Basis for Processing

slo100 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the player account agreement, including account management, transaction processing, and game provision.
• Legal obligation: Processing required to comply with AML regulations, KYC mandates, responsible gaming requirements, and other applicable legal obligations imposed on slo100 as a licensed gaming operator.
• Legitimate interests: Processing carried out for slo100's legitimate business interests, including fraud prevention, platform security, product improvement, and responsible gaming monitoring, where those interests are not overridden by the player's privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent, including optional marketing communications. Consent-based processing may be withdrawn at any time without affecting the lawfulness of prior processing.

7. Data Sharing

slo100 does not sell your personal data. We may share your data with the following categories of third parties strictly on a need-to-know basis and under appropriate contractual protections:

• KYC and identity verification providers: To verify your identity, age, and residential address as required by our licensing obligations.
• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT TRC20 blockchain networks — solely for the purpose of processing your deposits and withdrawals.
• Fraud prevention and security partners: To detect, flag, and investigate suspicious activity that may indicate fraud, money laundering, or unauthorised account access.
• Game software providers: Where technically necessary, limited session and account data may be shared with certified game providers to facilitate your gameplay. Game providers are contractually prohibited from using this data for any purpose other than game delivery.
• Regulatory and law enforcement authorities: Where slo100 is legally required or compelled by a lawful order to disclose data to a gaming regulator, financial intelligence unit, or law enforcement agency.
• Professional advisers: Lawyers, auditors, and accountants under strict confidentiality obligations, where required in connection with legal proceedings or compliance audits.

8. International Data Transfers

Some of the third-party processors and service providers used by slo100 may process personal data in jurisdictions outside Pakistan. Where such international transfers occur, slo100 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. Safeguards may include standard contractual clauses, binding corporate rules, or transfers to jurisdictions assessed to provide an adequate level of data protection.

Players who wish to obtain further information regarding the specific safeguards applied to international transfers of their data may contact slo100 support at the details provided in Section 15.

9. Data Retention

slo100 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law and regulatory obligations. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of your active account relationship with slo100, plus a minimum of five (5) years following account closure, as required by AML and gaming regulatory record-keeping obligations.
• Financial and transaction data: Retained for a minimum of five (5) years from the date of each transaction, in compliance with applicable financial record-keeping requirements.
• Communications and support data: Retained for a minimum of three (3) years following the resolution of the relevant interaction, for dispute resolution and quality assurance purposes.
• Technical and usage data: Retained for up to twelve (12) months from collection, unless retention for a longer period is required for a specific fraud investigation or security incident.

On expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where anonymisation is applied, the resulting anonymised data may be retained indefinitely for statistical and analytical purposes.

10. Security Measures

slo100 employs a multi-layered approach to data security. Technical and organisational measures in place include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and slo100 servers.
• Encryption at rest for stored personal and financial data.
• Role-based access controls ensuring that only authorised slo100 personnel can access personal data, and only to the extent required for their specific function.
• Two-factor authentication requirements for internal staff access to data systems.
• Regular security assessments and penetration testing conducted by independent security specialists.
• Incident response procedures designed to detect, contain, and report data security incidents promptly.

While slo100 takes all reasonable steps to protect your data, no transmission over the internet is completely secure. slo100 cannot guarantee the absolute security of data in transit and accepts no liability for interception events outside its reasonable control. Players are encouraged to use strong, unique passwords for their slo100 accounts and to report any suspected security compromise immediately.

11. Your Data Rights

Subject to applicable law and certain conditions, you have the following rights in relation to the personal data slo100 holds about you:

• Right of Access: You may request a copy of all personal data slo100 holds about you, together with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held by slo100.
• Right to Erasure: In certain circumstances, you may request deletion of your personal data. Note that slo100 may be required to retain certain data for regulatory compliance purposes even where an erasure request is made.
• Right to Restrict Processing: You may request that slo100 restrict its processing of your personal data in specified circumstances, such as where you contest the accuracy of the data.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request that your data be provided in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your personal data carried out on the basis of slo100's legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact the slo100 support team as detailed in Section 15. slo100 will respond to all verifiable requests within thirty (30) days. In complex cases, this period may be extended by a further sixty (60) days, in which case you will be informed of the extension and its reason.

12. Cookies & Tracking Technologies

slo100 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, game view preferences, and responsible gaming limit configurations.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate and interact with the Platform. This data is used solely to improve slo100's products and user experience. slo100 does not share analytics data with external advertising networks.
• Security and fraud prevention cookies: Used to identify suspicious browsing patterns, detect bot activity, and prevent account takeover attempts.

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to use the slo100 Platform. slo100 does not use third-party advertising cookies or cross-site tracking technologies.

13. Minors

slo100 is strictly a 21+ platform. We do not knowingly collect, store, or process personal data from individuals under the age of 21. Age verification is performed as part of the standard slo100 KYC process, and any account identified as belonging to a minor will be immediately suspended, the data reviewed, and appropriate action taken in accordance with regulatory requirements.

If you are a parent or guardian and believe that a person under the age of 21 has registered an account with slo100, please contact us immediately at the details provided in Section 15. slo100 will investigate and take prompt remedial action, including account closure and secure deletion of the minor's data where legally permissible.

14. Changes to This Privacy Policy

slo100 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform features. Material changes will be communicated to registered players by email or in-platform notification at least seven (7) days before the updated Policy takes effect.

The effective date at the top of this Policy will be updated on each revision. Your continued use of the slo100 Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with a revised Policy, you should cease using the Platform and may request account closure by contacting slo100 support.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data slo100 holds about you, please contact our support team through the following channels:

• Email: [email protected] — responses typically provided within 12 hours.
• Live Chat: Available 24/7 directly on the slo100 Platform — average response time under 2 minutes.

When submitting a data rights request, please include your registered email address and a clear description of your request so we can verify your identity and respond efficiently. slo100 does not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive.