Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") sets out the principles and practices governing the collection, use, storage, transfer, and protection of personal data by 100judi ("100judi", "we", "us", "our") in connection with the operation of the online gaming platform available at 100judi.club and all associated products and services.

This Policy applies to all individuals who interact with the 100judi platform, including registered account holders, former account holders, and visitors who access the website without registering. It should be read in conjunction with the 100judi Terms & Conditions, which govern the overall contractual relationship between 100judi and its players.

By registering a 100judi account, using any feature of the platform, or continuing to browse the 100judi website, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2. Data Controller

100judi operates as the data controller in respect of personal data collected through the 100judi platform. As data controller, 100judi determines the purposes for which, and the means by which, personal data is processed. 100judi processes personal data in accordance with the requirements of its international gaming licence and applicable data protection standards.

All enquiries relating to this Privacy Policy, data subject access requests, and requests to exercise data rights should be addressed to the 100judi data protection team via the contact details set out in Section 15 of this Policy.

3. Personal Data We Collect

3.1 Registration Data

When you create a 100judi account, we collect the following information which you provide directly:

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify that you meet the minimum age requirement of 21 years)
• Current residential address
• Valid email address
• Malaysian mobile telephone number
• Preferred currency (Malaysian Ringgit — MYR)

3.2 Identity Verification (KYC) Data

As required under our international gaming licence obligations, we collect identity verification documents including copies of your Malaysian Identity Card (MyKad) or passport, proof of current address (utility bill, bank statement), and proof of payment method ownership. These documents are processed solely for the purpose of verifying your identity and are stored securely in accordance with our data retention schedule.

3.3 Financial Transaction Data

We collect records of all financial transactions conducted through your 100judi account, including deposit amounts, payment method details (account numbers, eWallet identifiers — never full card numbers), withdrawal requests, and bonus transactions. This data is required for the processing of your transactions, the fulfilment of withdrawal requests, and our anti-money laundering compliance obligations.

3.4 Gaming Activity Data

We collect detailed records of your gaming activity on the 100judi platform, including game session histories, betting records, win and loss outcomes, game titles accessed, and time spent per session. This data is used for the operation of gaming services, dispute resolution, fair play monitoring, and responsible gaming analysis.

3.5 Technical and Usage Data

We automatically collect certain technical information when you access the 100judi platform, including IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, session duration, and clickstream data. This information is collected through server logs and, where applicable, cookies and similar tracking technologies.

3.6 Communications Data

When you contact 100judi customer support, we collect and retain records of your communications, including live chat transcripts, email correspondence, and support ticket histories. This data is retained for quality assurance, training, dispute resolution, and regulatory compliance purposes.

4. How We Use Your Personal Data

Purpose	Data Used
Account registration and management	Registration data, KYC documents
Identity verification and age confirmation (21+)	KYC documents, date of birth
Processing deposits and withdrawals	Financial transaction data, KYC data
Providing gaming services	Gaming activity data, account data
Anti-money laundering compliance screening	Financial data, identity data, gaming data
Fraud detection and prevention	Technical data, financial data, gaming data
Responsible gaming monitoring and intervention	Gaming activity data, deposit data
Customer support and dispute resolution	Communications data, gaming data, account data
Platform security and integrity	Technical data, IP address, session data
Regulatory reporting and licence compliance	All categories as required
Sending account transactional communications	Email address, mobile number
Platform improvement and analytics	Technical data, usage data (anonymised where possible)

100judi does not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects, except where such processing is required for fraud detection, AML compliance, or responsible gaming obligations, in which case it is performed under appropriate legal safeguards.

5. Legal Basis for Processing

100judi processes personal data on the following legal bases:

• Contract performance: Processing necessary to fulfil our contractual obligations to you as a registered player, including account management, gaming service provision, and payment processing.
• Legal obligation: Processing required to comply with 100judi's obligations under its international gaming licence, anti-money laundering regulations, age verification requirements, and applicable data protection law.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and business analytics, where such interests do not override your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications (where applicable), cookie usage beyond strictly necessary categories, and specific processing activities where consent is the most appropriate basis. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

100judi does not sell, rent, or trade your personal data to any third party. We share personal data only in the following circumstances:

6.1 Service Providers and Data Processors

We engage third-party service providers who process personal data on our behalf under strict data processing agreements. These include: payment processing and banking partners (FPX, Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost) for the purpose of processing your transactions; identity verification and KYC service providers; gaming software studios whose platforms operate within the 100judi environment; cloud infrastructure and hosting providers; and customer support platform providers.

All third-party data processors are contractually required to process personal data only on 100judi's documented instructions, to implement appropriate technical and organisational security measures, and to comply with applicable data protection standards.

6.2 Regulatory and Legal Disclosure

100judi may disclose personal data to its licensing authority, law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by law, by the terms of its gaming licence, or by a lawful order from a competent court or regulatory body. Such disclosures are made only to the extent required and are documented appropriately.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of 100judi's assets, personal data held by 100judi may be transferred to the acquiring entity, subject to the acquiring entity's commitment to process personal data in accordance with this Privacy Policy or a policy offering equivalent protections. Players will be notified of any such transfer.

7. International Data Transfers

The 100judi platform serves Malaysian players and processes personal data through systems and service providers that may be located outside Malaysia. Where personal data is transferred to countries that may not provide a level of data protection equivalent to Malaysian standards, 100judi implements appropriate safeguards, including contractual clauses, to ensure that your personal data receives adequate protection regardless of where it is processed.

8. Data Retention

100judi retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods imposed by licensing and legal obligations:

• Account and KYC data: Retained for a minimum of 5 years from the date of account closure, as required under anti-money laundering regulations applicable under our gaming licence.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Gaming activity records: Retained for a minimum of 3 years for dispute resolution and regulatory compliance purposes.
• Customer support communications: Retained for 2 years unless a longer period is required for an ongoing dispute or regulatory matter.
• Technical and server log data: Retained for 12 months unless retention is required for an active security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9. Cookies and Tracking Technologies

9.1 Strictly Necessary Cookies

100judi uses strictly necessary cookies that are essential for the operation of the platform, including session management cookies that maintain your authenticated login state, security cookies that support fraud detection and prevent cross-site request forgery, and load balancing cookies. These cookies cannot be disabled as they are required for basic platform functionality.

9.2 Analytics Cookies

With your consent, 100judi uses analytics cookies to collect aggregated information about how players use the platform, including which pages are visited, session durations, navigation patterns, and feature usage. This data is used to improve the platform and is processed in anonymised or pseudonymised form where possible.

9.3 Managing Cookie Preferences

You can manage non-essential cookie preferences through the cookie consent settings available on the 100judi platform. You may also configure your browser to block or delete cookies, though doing so may affect the functionality of certain platform features. Strictly necessary cookies cannot be disabled through browser settings without affecting your ability to use the platform.

10. Your Data Protection Rights

Subject to applicable data protection law and the legitimate override of 100judi's legal and regulatory obligations, you have the following rights in respect of your personal data held by 100judi:

• Right of access: You may request a copy of the personal data 100judi holds about you. We will respond to such requests within 30 days.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Some corrections can be made directly through account settings; others require submission to our data team.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data in certain circumstances. This right is subject to 100judi's legal and regulatory retention obligations, which may prevent deletion during the applicable retention period.
• Right to restriction of processing: You may request that 100judi limits the processing of your personal data in certain circumstances, for example while a rectification request is under review.
• Right to data portability: You may request that personal data you have provided to 100judi be returned to you or transferred to another organisation in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your personal data where it is based on 100judi's legitimate interests, subject to our ability to demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the 100judi data protection team using the contact details in Section 15.

11. Children's Privacy and Underage Protection

The 100judi platform is strictly prohibited to individuals under the age of 21. 100judi does not knowingly collect, use, or retain personal data from individuals under 21 years of age. Age verification is a mandatory step in the 100judi account registration and KYC process. Any account found to have been registered by an individual under the minimum age will be immediately suspended, all associated personal data will be deleted except where retention is required under applicable law, and any deposits or winnings held in the account will be handled in accordance with applicable regulatory requirements.

12. Security Measures

100judi implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• TLS encryption for all data transmitted between your browser and the 100judi platform
• Encrypted storage of sensitive data at rest, including KYC documents and financial information
• Access controls limiting personal data access to authorised personnel with a legitimate operational need
• Two-factor authentication available for all player accounts
• Regular security assessments and penetration testing by qualified security professionals
• Staff training on data protection and information security obligations
• Incident response procedures for the identification, containment, and notification of data security incidents

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, 100judi will notify affected individuals without undue delay and will report the breach to relevant authorities as required under its licensing obligations.

13. Responsible Gaming and Personal Data

100judi processes gaming activity data, deposit and loss records, and session behaviour data as part of its responsible gaming programme. This processing is carried out to identify patterns that may indicate a player is at risk of developing problematic gaming behaviour, to enforce player-requested deposit limits and self-exclusion periods, and to comply with responsible gaming obligations under 100judi's international gaming licence.

Where responsible gaming flags are triggered by analytical processing of your data, 100judi may proactively contact you to offer support resources and information about available tools. This processing is carried out in your interest and under the legitimate interests legal basis, balanced against your right to privacy. Players who have requested self-exclusion are removed from all marketing communications for the duration of their exclusion period. Further information on responsible gaming tools is available on the Responsible Gaming page.

14. Updates to This Privacy Policy

100judi reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, amendments to applicable law, changes in our licensing requirements, or improvements to our privacy governance framework. When material changes are made to this Policy, 100judi will notify registered account holders by email or through a platform notification with a reasonable advance notice period before the changes take effect. The "Last updated" date at the top of this Policy will be updated to reflect the date of the most recent revision. Continued use of the 100judi platform following the effective date of an updated Privacy Policy constitutes acknowledgement of the revised terms.

15. Contact and Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or wish to make a complaint about how 100judi has handled your personal data, please contact us through the following channels:

• Email: [email protected] — for privacy queries, please include "Privacy Request" in your subject line
• Live Chat: Available 24/7 on the 100judi platform — ask to be connected to the data protection team for privacy-related matters
• Response Time: Privacy requests and complaints are acknowledged within 5 business days and responded to substantively within 30 calendar days

100judi is committed to resolving privacy complaints fairly and promptly. If you are not satisfied with our response to a privacy complaint, you may have the right to lodge a complaint with a relevant data protection supervisory authority, the details of which are available from our support team upon request.