Privacy Policy

1. Data Controller

1.1 The data controller responsible for the processing of personal data collected through the 100slot platform is the operator of 100slot.club ("100slot", "we", "us", "our"). For data-related enquiries, please contact us using the details set out in Section 15 of this Policy.

1.2 This Privacy Policy applies to all personal data processed in connection with the 100slot website, mobile browser interface, account registration, gameplay, sportsbook activity, payment transactions, customer support interactions, and all other services provided under the 100slot brand.

2. Personal Data We Collect

2.1 100slot collects the following categories of personal data, depending on your interaction with the platform:

2.2 Where you voluntarily provide additional information — for example, in support requests or responsible gaming self-assessments — that information is also processed in accordance with this Policy.

3. How We Collect Personal Data

3.1 100slot collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or responding to surveys and promotions.
• Automated collection: Technical and usage data collected automatically when you access the 100slot platform, including via cookies, server logs, and session tracking technologies.
• Third-party sources: Identity and fraud verification data from KYC service providers; payment data from payment processors including Touch n Go eWallet, Boost, Maybank FPX, CIMB Clicks, and Public Bank; device fingerprinting data from fraud prevention providers.
• Public sources: In limited circumstances, publicly available data used to verify identity information or comply with anti-money laundering obligations.

4. Purposes of Processing

4.1 100slot processes your personal data for the following purposes:

• Creating and managing your 100slot account and facilitating the 100slot Login process;
• Verifying your identity, age (21+), and eligibility to use the platform in accordance with international gaming authority requirements;
• Processing deposits and withdrawals via supported Malaysian payment methods;
• Providing access to all 100slot services including slots, live casino, virtual casino, sportsbook, and Toto 4D;
• Administering bonuses, promotions, cashback, and VIP loyalty rewards;
• Monitoring and enforcing responsible gaming obligations, including processing self-exclusion requests, deposit limit settings, and session reminders;
• Detecting and preventing fraud, money laundering, collusion, and other prohibited activity;
• Providing customer support and resolving disputes;
• Complying with applicable legal, regulatory, and licensing obligations;
• Analysing platform usage to improve the 100slot user experience;
• Sending transactional communications (account notifications, deposit confirmations, security alerts);
• Sending promotional communications where you have consented to receive them.

5. Legal Bases for Processing

5.1 100slot processes personal data under the following legal bases:

• Contractual necessity: Processing required to perform the contract with you — including account registration, payment processing, game provision, and withdrawal handling.
• Legal obligation: Processing required to comply with applicable law — including KYC/AML obligations, age verification requirements, and gaming regulatory compliance.
• Legitimate interests: Processing that serves 100slot's legitimate interests in operating a secure, fair, and commercially viable platform — including fraud prevention, security monitoring, and platform analytics — where such interests are not overridden by your data protection rights.
• Consent: Processing for optional purposes where you have given explicit consent — primarily for marketing communications. You may withdraw consent at any time by contacting support or updating your account preferences.

6. Data Sharing & Disclosure

6.1 100slot does not sell personal data to third parties for marketing or commercial profiling purposes.

6.2 Personal data may be shared with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment processors: Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other payment service providers for the purpose of processing deposits and withdrawals;
• Identity verification providers: KYC and AML compliance service providers for the purpose of verifying identity and age;
• Game providers: Licensed game software providers (e.g., Pragmatic Play, NetEnt) where necessary to deliver specific game functionality — limited to session identifiers and technical data;
• Fraud prevention services: Providers of device fingerprinting, IP analysis, and transaction fraud monitoring;
• IT infrastructure providers: Cloud hosting and data storage providers under strict data processing agreements;
• Legal and regulatory authorities: Gaming regulators, law enforcement agencies, and courts where disclosure is required by law or legal process.

6.3 In the event of a business merger, acquisition, or restructuring, personal data held by 100slot may be transferred to a successor entity, subject to the same data protection obligations contained in this Policy.

7. International Data Transfers

7.1 Some of 100slot's service providers and infrastructure partners may process personal data in jurisdictions outside Malaysia. Where such transfers occur, 100slot takes steps to ensure that adequate protections are in place, including:

• Use of service providers located in jurisdictions with adequacy determinations or equivalent data protection standards;
• Standard contractual clauses or binding corporate rules with international data processors;
• Technical and organisational safeguards appropriate to the sensitivity of the data transferred.

7.2 By using the 100slot platform and providing your personal data, you acknowledge that your data may be transferred and processed in jurisdictions outside Malaysia in the manner described above.

8. Data Retention

8.1 100slot retains personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. The following general retention periods apply:

• Account data and KYC records: Retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering and gaming regulatory requirements;
• Financial transaction records: Retained for a minimum of seven (7) years to satisfy tax and financial regulatory obligations;
• Gaming and betting history: Retained for a minimum of three (3) years following last activity for dispute resolution and regulatory audit purposes;
• Customer support communications: Retained for three (3) years following resolution of the matter to which they relate;
• Technical logs and session data: Retained for up to twelve (12) months for security and fraud investigation purposes;
• Marketing consent records: Retained until consent is withdrawn and for one (1) year thereafter as evidence of prior consent.

8.2 Where personal data is no longer required for any legitimate purpose, it will be securely deleted or anonymised.

9. Cookies & Tracking Technologies

9.1 100slot uses cookies and similar tracking technologies to operate the platform, maintain session state, personalise your experience, and gather analytics data. The following types of cookies are used:

• Strictly necessary cookies: Essential for the 100slot Login session, security token management, and basic platform functionality. These cannot be disabled without breaking core platform features.
• Performance cookies: Used to collect aggregated analytics data about how players use the platform, which pages are visited most frequently, and where errors occur. Data is anonymised.
• Functional cookies: Used to remember your preferences — such as language settings, preferred game categories, and display options — between sessions.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other security threats. Includes device fingerprinting data.

9.2 You may control cookie settings through your browser preferences. Disabling strictly necessary cookies will impair your ability to use the 100slot platform, including the 100slot Login functionality.

9.3 100slot does not use third-party advertising cookies or sell browsing data to advertising networks.

10. Your Data Rights

10.1 Subject to applicable law and applicable exemptions, you have the following rights in relation to your personal data held by 100slot:

• Right of access: You may request a copy of the personal data 100slot holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to restrict processing: You may request that processing of your data be restricted in certain circumstances;
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a machine-readable copy of your data;
• Right to object: You may object to processing based on legitimate interests; you may also opt out of marketing communications at any time;
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

10.2 To exercise any of these rights, submit a written request to 100slot support via email at [email protected]. Requests will be acknowledged within 3 business days and resolved within 30 days, extendable to 60 days for complex requests.

10.3 100slot will not charge a fee for processing data rights requests unless they are manifestly unfounded or repetitive, in which case a reasonable administrative fee may apply.

11. Children's Privacy

11.1 The 100slot platform is strictly intended for adults aged 21 years and above. 100slot does not knowingly collect personal data from persons under the age of 21.

11.2 If 100slot becomes aware that personal data has been collected from a person under 21, the relevant account will be immediately closed, all data will be deleted except where retention is required by law, and any deposits will be returned through the original payment method following verification.

11.3 Parents and guardians of minors are strongly encouraged to use parental control software to restrict access to online gaming platforms on shared devices. If you believe a minor has accessed or registered on 100slot, please contact us immediately at [email protected].

12. Security Measures

12.1 100slot implements technical and organisational security measures appropriate to the risk of processing personal data in an online gaming environment. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and 100slot servers;
• Encryption at rest for sensitive personal and financial data stored in 100slot databases;
• Multi-factor authentication requirements for internal system access;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Continuous security monitoring, intrusion detection, and anomaly alerting;
• Regular security audits and penetration testing by independent third-party providers;
• Incident response procedures for the rapid containment and notification of data security events.

12.2 Notwithstanding these measures, no internet-based platform can guarantee absolute data security. You are responsible for maintaining the security of your own 100slot Login credentials. 100slot strongly recommends enabling two-factor authentication on your account.

12.3 In the event of a data security incident that poses a risk to your rights and freedoms, 100slot will notify affected players without undue delay and take all reasonable steps to mitigate harm.

13. Third-Party Links

13.1 The 100slot platform may contain references to third-party services, including payment gateways, which operate under their own privacy policies. 100slot is not responsible for the data practices of third-party services and encourages you to review the privacy policies of any third-party platform before providing personal data to them.

13.2 The inclusion of any third-party service in the 100slot payment or game ecosystem does not constitute an endorsement of that party's data practices.

14. Amendments to This Policy

14.1 100slot may update this Privacy Policy from time to time to reflect changes in data processing practices, applicable law, or platform functionality. The effective date of the current version is displayed at the top of this document.

14.2 Material changes to this Policy will be communicated to registered players via email or a prominent notice on the 100slot platform at least 14 days before taking effect. Continued use of the platform after the effective date of any amendment constitutes acceptance of the updated Policy.

14.3 We encourage you to review this page periodically to stay informed about how 100slot protects your personal data.

15. Contact & Complaints

15.1 For any questions, requests, or complaints relating to this Privacy Policy or 100slot's data processing practices, please contact our Data Protection team:

15.2 If you are not satisfied with 100slot's response to a data protection complaint, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction. For Malaysian users, the Personal Data Protection Commissioner (PDPC) under the Personal Data Protection Act 2010 (PDPA) is the relevant national supervisory authority.