hotslot Privacy Policy

Section 01

Introduction

hotslot is committed to protecting the privacy and personal data of every player who uses our Platform. We understand that Filipino players entrust us with sensitive personal and financial information, and we take that responsibility seriously. This Policy has been drafted in accordance with applicable Philippine data protection law, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as internationally recognized data protection principles.

As a personal information controller under Philippine law, hotslot determines the purposes and means by which your personal data is processed. We are accountable for ensuring that all data processing activities carried out by hotslot — or by third parties acting on our behalf — comply with the standards set out in this Policy and in applicable law.

This Policy applies to all personal data collected through the hotslot Platform, including data collected during account registration, gameplay, financial transactions, customer support interactions, and your use of our website. It applies to all registered players and visitors to hotslot.club, regardless of whether they are located in Metro Manila, Cebu, Davao, Quezon City, Makati, or any other part of the Philippines.

Section 02

Data We Collect

hotslot collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. We collect data in three primary ways: information you provide directly to us, information generated automatically through your use of the Platform, and information received from third parties.

2.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, residential address, email address, and mobile number.
• Identity verification (KYC) data: Government-issued ID (e.g., Philippine passport, SSS ID, PhilHealth ID, driver's license), proof of address, and selfie verification images.
• Payment data: GCash account number, PayMaya account details, BPI, BDO, or Metrobank account information used for deposits and withdrawals. We do not store full bank account credentials — payment data is processed through secure, PCI-DSS compliant payment gateways.
• Communications data: Messages, queries, and complaints submitted through our live chat support, email correspondence, or any feedback form on the Platform.
• Responsible gaming data: Self-exclusion requests, deposit limit preferences, cooling-off period settings, and any other responsible gaming tool configurations you apply to your account.

2.2 Data Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, games played, session duration, click patterns, wagering history, and in-platform navigation behavior.
• Transaction data: Deposit and withdrawal amounts, dates, times, payment methods used, and transaction reference numbers.
• Geolocation data: Approximate location derived from your IP address, used to verify that you are accessing the Platform from a permitted jurisdiction.
• Cookie and tracking data: Data collected through cookies, web beacons, and similar technologies as described in Section 5 of this Policy.

2.3 Data from Third Parties

• Identity verification providers: Results of automated identity and age verification checks conducted by our KYC service partners.
• Payment processors: Transaction confirmation data and fraud screening results from GCash, PayMaya, and banking partners.
• Game providers: Gameplay data, round results, and session logs from third-party live dealer studio providers and RNG game suppliers.
• Fraud prevention services: Risk scores and flagging data from third-party anti-fraud and AML screening services.

Section 03

How We Use Your Data

hotslot uses your personal data only for the purposes described in this Policy. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which hotslot processes your personal data are as follows:

• Account creation and management: To register your hotslot account, verify your identity and age (21+ requirement), and maintain your account in good standing.
• Service delivery: To provide you with access to hotslot's games, process your deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank, and deliver the full range of Platform features.
• Legal and regulatory compliance: To fulfill our obligations under Philippine law, including the Data Privacy Act of 2012, Anti-Money Laundering Act (AMLA), and PAGCOR regulatory requirements. This includes conducting KYC verification, transaction monitoring, and suspicious activity reporting.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other illegal conduct on the Platform.
• Responsible gaming: To administer deposit limits, cooling-off periods, self-exclusion requests, and other responsible gaming tools you have activated on your account.
• Customer support: To respond to your queries, complaints, and support requests submitted via live chat or email.
• Platform improvement: To analyze usage patterns, identify technical issues, and improve the performance, design, and content of the hotslot Platform.
• Marketing communications: To send you promotional offers, bonus notifications, and news about new games or features — but only where you have given your explicit consent to receive such communications. You may withdraw this consent at any time through your account settings.
• Legal claims: To establish, exercise, or defend legal claims in the event of a dispute between you and hotslot.

hotslot will not use your personal data for automated decision-making that produces legal or similarly significant effects without your knowledge, except where required by law or where necessary to prevent fraud.

Section 04

Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, hotslot processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between you and hotslot — specifically, to operate your account, process transactions, and deliver gaming services.
• Legal obligation: Processing is required to comply with applicable Philippine law, including AML obligations, PAGCOR regulatory requirements, and tax reporting obligations.
• Legitimate interests: Processing is necessary for hotslot's legitimate interests in preventing fraud, securing the Platform, improving our services, and managing our business — provided these interests are not overridden by your rights and interests.
• Consent: For marketing communications and non-essential cookies, hotslot relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Vital interests: In exceptional circumstances, hotslot may process data to protect your vital interests or those of another person — for example, in a responsible gaming emergency.

Section 05

Cookies & Tracking Technologies

hotslot uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyze usage patterns, and support our security and fraud prevention measures. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain executable code and cannot access other data on your device.

5.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without breaking core Platform functionality.
• Functional cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations. Disabling these cookies may affect your experience on the Platform.
• Analytics cookies: Collect anonymized data about how players use the Platform — which pages are visited most, where users drop off, and how long sessions last. This data helps us improve the Platform. These cookies require your consent.
• Security and fraud prevention cookies: Used to detect suspicious activity, identify returning devices, and support our AML and fraud monitoring systems. These are necessary for the security of the Platform.

5.2 Managing Cookies

You can manage your cookie preferences through the cookie consent banner displayed when you first visit hotslot.club, or through your browser settings. Please note that disabling strictly necessary cookies will prevent you from using the Platform. Most modern browsers allow you to view, delete, and block cookies — refer to your browser's help documentation for instructions.

hotslot does not use third-party advertising cookies or behavioral tracking cookies for the purpose of serving targeted advertisements on external websites.

Section 06

Data Sharing & Disclosure

hotslot does not sell, rent, or trade your personal data to third parties. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Service providers and processors: We share data with carefully selected third-party service providers who process data on our behalf, including KYC verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), game content providers, cloud hosting providers, and customer support platform operators. All processors are bound by data processing agreements that require them to protect your data and process it only on hotslot's instructions.
• Regulatory and law enforcement authorities: hotslot is required by Philippine law to disclose certain data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent authorities upon lawful request. We will comply with all valid legal orders and regulatory requirements.
• Fraud prevention and AML networks: We may share data with industry fraud prevention and AML screening services to protect the Platform and the broader gaming industry from financial crime.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of hotslot's business, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify you of any such transfer and the privacy implications before it takes effect.
• With your consent: We may share your data with third parties for purposes not described above where you have given your explicit prior consent.

Section 07

Data Retention

hotslot retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, hotslot will securely delete or anonymize your personal data in accordance with our internal data disposal procedures. Anonymized data — which can no longer be linked to any individual — may be retained indefinitely for statistical and analytical purposes.

Section 08

Data Security

hotslot implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security framework includes:

• Encryption in transit: All data transmitted between your device and the hotslot Platform is encrypted using TLS 1.3 and 256-bit SSL encryption. This ensures that your login credentials, payment details, and personal information cannot be intercepted during transmission.
• Encryption at rest: Sensitive personal data stored on hotslot's servers — including KYC documents and financial data — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within hotslot's systems is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Multi-factor authentication: hotslot's internal systems require multi-factor authentication for all staff accessing personal data or administrative functions.
• Penetration testing and vulnerability management: hotslot conducts regular security assessments, penetration tests, and vulnerability scans to identify and remediate security weaknesses before they can be exploited.
• Incident response: hotslot maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission (NPC) within 72 hours and affected players without undue delay, as required by the Data Privacy Act of 2012.

While hotslot takes all reasonable steps to protect your data, no internet transmission or electronic storage system is 100% secure. You are responsible for maintaining the security of your own account credentials and for notifying hotslot immediately if you suspect unauthorized access to your account.

Section 09

Your Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by hotslot. To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 13.

• Right to be informed: You have the right to be informed about how your personal data is collected, used, and processed — which is the primary purpose of this Privacy Policy.
• Right of access: You have the right to request a copy of the personal data hotslot holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update most of your account information directly through your hotslot account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to hotslot's legal retention obligations.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to hotslot's overriding legitimate grounds.
• Right to restrict processing: You have the right to request that hotslot restricts the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that hotslot has processed your personal data in violation of the Data Privacy Act of 2012.

hotslot will respond to all data subject requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it. hotslot will not charge a fee for processing data subject requests unless they are manifestly unfounded or excessive.

Section 10

Children's Privacy

The hotslot Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. hotslot does not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will immediately suspend the associated account, delete the data, and return any deposited funds at our discretion.

hotslot strongly recommends that parents and guardians use parental control software to restrict access to online gambling platforms. Resources such as Net Nanny, Qustodio, and similar tools can help prevent minors from accessing age-restricted content online.

Section 11

International Data Transfers

hotslot's primary operations and data storage are based in the Philippines. However, some of our third-party service providers — including cloud infrastructure providers, KYC verification services, and game content providers — may process your personal data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, hotslot ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Philippine Data Privacy Act of 2012. These safeguards may include:

• Standard contractual clauses approved by the National Privacy Commission or equivalent regulatory body.
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection.
• Binding corporate rules where data is transferred within a corporate group.
• Your explicit consent to the transfer, where no other safeguard is available.

You may request details of the specific safeguards in place for any international transfer of your personal data by contacting our Data Protection Officer.

Section 12

Changes to This Policy

hotslot reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email or in-platform notification at least 7 days before the changes take effect.

The most current version of this Policy will always be available on this page, with the effective date clearly indicated at the top. Your continued use of the hotslot Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed of how hotslot protects your personal data.

If you have any concerns about changes to this Policy, please contact our Data Protection Officer before the effective date of the change. If you do not agree with the revised Policy, you may request account closure in accordance with the Terms and Conditions.

Section 13

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or hotslot's data processing practices, please contact our Data Protection Officer. We are committed to addressing all privacy-related inquiries promptly and transparently.

You may reach our Data Protection Officer and general support team via live chat on the hotslot Platform, available 24 hours a day, 7 days a week. Our average response time for privacy-related inquiries is within 24 hours on business days. For formal data subject requests, please submit your request in writing via email — our address is listed in the footer of this page.

If you are not satisfied with hotslot's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph. The NPC is the independent regulatory body responsible for enforcing the Data Privacy Act of 2012 and protecting the privacy rights of Filipino citizens.