Privacy Policy — 100slot

1.1 The data controller for personal data processed through the 100slot Platform is the operator of https://100slot.co ("100slot", "we", "us", "our"). 100slot is an internationally licensed online gaming platform serving players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and beyond.

1.2 For data-related enquiries, the 100slot Data Protection contact is reachable via our support team. Contact details are provided in Section 14 of this Policy.

1.3 This Privacy Policy applies to all personal data collected from players, account holders, and website visitors through the 100slot Platform, its associated features (including the Slots section, Live Casino, and Sportsbook), and any communications between you and 100slot.

Depending on your level of interaction with the 100slot Platform, we may collect the following categories of personal data:

2.2 You are not obligated to provide all of the above data; however, certain data categories (particularly Identity, Contact, Financial, and KYC data) are required to register and maintain a 100slot Account and to process withdrawals. Failure to provide mandatory data will result in restricted or suspended Account functionality.

100slot collects personal data through the following means:

• Direct submission: When you register a 100slot Account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your Account settings, you directly provide personal data to us.
• Automated collection: When you access and interact with the 100slot Platform, we automatically collect Technical Data through cookies, server logs, and similar tracking technologies. See Section 9 for details.
• Third-party payment processors: When you transact using Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, Visa, or Mastercard, our payment processing partners may share transaction confirmation data with us for wallet crediting and AML compliance purposes.
• Identity verification providers: Where we use third-party identity verification services to assist with KYC, those providers may return verified identity data and verification outcome data to us.
• Gaming software providers: Licensed game providers integrated into the 100slot Platform may share game session and outcome data with us for the purpose of accurate wagering record-keeping and RNG audit compliance.

100slot uses your personal data for the following purposes:

• Account management: To register, maintain, and close your 100slot Account, including identity verification, login authentication, and account security.
• Platform delivery: To provide access to and facilitate use of all 100slot services, including slots, live casino, and sportsbook wagering.
• Financial transactions: To process deposits, withdrawals, bonus credits, and refunds accurately and securely.
• Regulatory compliance: To fulfil our obligations under our international gaming authority licence, including AML compliance, KYC verification, age verification, and regulatory reporting where required.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, identity theft, and other prohibited conduct as set out in our Terms & Conditions.
• Responsible gaming: To monitor gaming activity patterns that may indicate problem gambling behaviour, to give effect to deposit limits and self-exclusion requests, and to direct players to appropriate support resources where warranted.
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of support interactions for quality assurance and compliance purposes.
• Marketing communications: Where you have given your consent, to send you promotional offers, bonus notifications, and platform updates. You may withdraw marketing consent at any time through your Account settings or by contacting support.
• Platform improvement: To analyse aggregate usage patterns and technical data for the purpose of improving Platform performance, user experience, and game selection.
• Legal obligations: To comply with applicable legal obligations, court orders, regulatory directions, or law enforcement requests.

100slot processes your personal data on the following legal bases:

• Contract performance: Processing necessary to fulfil our obligations under the Account agreement and Terms & Conditions — including Account management, payment processing, and platform delivery.
• Legal obligation: Processing required to comply with applicable law, including AML regulations, licensing requirements, KYC obligations, and regulatory reporting.
• Legitimate interests: Processing necessary for our legitimate business interests where those interests are not overridden by your privacy rights — including fraud detection, Platform security, responsible gaming monitoring, and analytics.
• Consent: Processing based on your explicit consent — including marketing communications and, where applicable, the use of non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6.1 100slot does not sell your personal data to third parties for their own marketing purposes. We share personal data only in the circumstances described below:

• Payment processors: Transaction data is shared with payment partners (including Touch n Go eWallet, Boost, and banking partners) solely to the extent necessary to process financial transactions.
• Identity verification providers: KYC document data is shared with licensed identity verification partners for the purpose of verifying your identity and age in compliance with our licensing obligations.
• Game providers: Wagering session data is shared with our licensed game software providers to facilitate game delivery, record outcomes, and comply with RNG certification audit requirements.
• Regulatory and law enforcement authorities: We may disclose personal data to our licensing authority, financial intelligence units, law enforcement agencies, or other government bodies where required by law or valid legal process.
• Professional advisers: Legal, audit, and compliance advisers may access personal data to the extent necessary for the provision of their professional services, subject to confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of 100slot's business, personal data held at the time of transfer may form part of the transferred assets, subject to notice being given to affected players.

6.2 All third parties with whom we share personal data are contractually required to maintain appropriate data security standards and to use personal data only for the specific purposes for which it was shared.

7.1 As an internationally licensed online gaming platform, 100slot may process and store personal data on servers located outside Malaysia. Where personal data is transferred to countries that do not offer the same level of data protection as Malaysia, 100slot implements appropriate safeguards — such as standard contractual clauses or equivalent data transfer mechanisms — to ensure an adequate level of protection.

7.2 By using the 100slot Platform and agreeing to this Privacy Policy, you acknowledge that your personal data may be transferred to, processed in, and stored in locations outside your country of residence.

8.1 100slot retains personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, regulatory, audit, and licensing retention requirements.

8.2 In practice, this means:

• Active Account data is retained for the duration of your Account's active status.
• KYC and transaction data is retained for a minimum of 5 years following Account closure or the last relevant transaction, in compliance with AML regulations and our licensing authority's record-keeping requirements.
• Self-exclusion and responsible gaming data is retained for a minimum of 5 years to ensure that re-registration by a self-excluded player is detected and prevented.
• Support and communication records are typically retained for 3 years following the close of a support interaction.
• Marketing consent records are retained for as long as marketing communications are sent to you, plus a reasonable period thereafter for evidential purposes.

8.3 Following the applicable retention period, personal data is securely deleted or anonymised. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes.

9.1 The 100slot Platform uses cookies and similar tracking technologies to operate correctly, remember your preferences, and analyse usage patterns. A cookie is a small text file stored on your device by your browser.

9.2 We use the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and wallet session identifiers. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: Remember your preferences such as language settings, display preferences, and login status to avoid repeated re-authentication.
• Performance and analytics cookies: Collect anonymised or aggregated data about how players use the Platform — such as pages visited, session duration, and navigation paths — to help us improve Platform performance and user experience.
• Marketing cookies: Used, with your consent, to deliver relevant promotional content and track the effectiveness of marketing campaigns. These are not used to sell your data to third parties.

9.3 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the 100slot Platform. For non-essential cookies, a consent mechanism is presented on your first visit to the Platform.

Subject to applicable data protection law, you have the following rights in relation to your personal data held by 100slot:

• Right of access: You have the right to request a copy of the personal data we hold about you, along with information about how it is used.
• Right to rectification: You have the right to request correction of inaccurate or incomplete personal data. You can update basic Account information directly through your Account settings.
• Right to erasure: In certain circumstances, you have the right to request deletion of your personal data. Note that this right is subject to overriding legal retention obligations, particularly in respect of AML and licensing data.
• Right to restrict processing: You may request that we limit the processing of your personal data in certain circumstances, such as while the accuracy of data is contested.
• Right to data portability: Where processing is based on consent or contract performance and carried out by automated means, you may request a machine-readable copy of personal data you provided to us.
• Right to object: You have the right to object to processing based on our legitimate interests. We will stop such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time through your Account settings or by contacting support. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, contact the 100slot Data Protection team via live chat or email as set out in Section 14. We will respond to all verified requests within 30 days.

11.1 The 100slot Platform is strictly intended for individuals aged 21 and above. We do not knowingly collect personal data from persons under the age of 21.

11.2 Where 100slot becomes aware, or has reasonable grounds to believe, that personal data has been collected from a person under the age of 21, we will immediately close the associated Account, delete the personal data to the extent permitted by applicable law, and return any funds to the verified funding source.

11.3 If you believe that a minor has registered or attempted to register a 100slot Account, please notify us immediately via live chat so that we can take appropriate action.

12.1 100slot implements technical and organisational security measures appropriate to the risks associated with the processing of personal data on an online gaming platform. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 100slot Platform.
• Encryption of sensitive data fields (including password hashes and financial identifiers) at rest in our database infrastructure.
• Access controls ensuring that personal data is accessible only to 100slot staff and partners with a legitimate operational need.
• Regular security assessments and penetration testing of Platform infrastructure.
• Automated detection systems for unusual login activity, including geographic anomaly alerts.
• Segregated storage of player funds and financial records from operational systems.

12.2 Notwithstanding the above, no online system is entirely immune from security risk. You are responsible for maintaining the security of your own Account credentials and for promptly reporting any suspected unauthorised access to 100slot support.

12.3 Data Breach Notification. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, 100slot will notify affected players without undue delay through the contact details held on their Account.

13.1 100slot reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or Platform features. The date of the most recent revision is displayed at the top of this document.

13.2 Where updates to this Policy are material — for example, where we introduce a new purpose for processing your personal data or a new category of third-party sharing — we will provide advance notice through a Platform notification or an email to your registered address.

13.3 Your continued use of the 100slot Platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not accept the revised Policy, you should discontinue use of the Platform and request Account closure.

14.1 For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 100slot, please contact us via:

• Live Chat: Available 24/7 directly on the 100slot Platform.
• Email: [email protected] — please include "Privacy Request" in your subject line.

14.2 We aim to respond to all privacy-related enquiries within 30 calendar days. Complex requests may take longer; in such cases, we will notify you of the extended timeline within the initial 30-day period.

14.3 If you are dissatisfied with how 100slot has handled your personal data or responded to a data rights request, you have the right to lodge a complaint with the applicable data protection supervisory authority or with 100slot's licensing authority, details of which are available from our support team on request.