Privacy Policy

This Privacy Policy (hereinafter "Policy") describes how 100slot (hereinafter "the Company", "we", "us", or "our") collects, uses, stores, shares, and otherwise processes personal data in connection with the operation of the online gaming platform accessible at https://100slot.cam (hereinafter "the Platform").

This Policy applies to all individuals who access or use the Platform, including registered Members, prospective players who browse the site without registering, and any person who interacts with 100slot through our customer support channels. It applies regardless of the device or location from which the Platform is accessed.

By accessing the Platform and/or registering an account, you acknowledge that you have read and understood this Privacy Policy, and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform immediately.

The following terms shall bear the meanings ascribed to them in this section unless context requires otherwise:

• "Personal Data" — Any information that identifies or could reasonably identify a living individual, including name, identification number, contact details, financial information, and online identifiers such as IP addresses and device IDs.
• "Processing" — Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, or deletion.
• "Data Subject" — The identified or identifiable natural person to whom Personal Data relates; in the context of this Policy, primarily the registered Member or Platform visitor.
• "Data Controller" — The entity that determines the purposes and means of processing Personal Data; this is 100slot in respect of all data collected through the Platform.
• "Third Party" — Any entity or individual other than the Data Subject, the Company, and persons authorised to process data under the direct authority of the Company.
• "Cookie" — A small text file placed on a visitor's device by a website to store information about their session and preferences.
• "KYC" — Know Your Customer verification; the identity, age, and address verification process required before processing withdrawals or as otherwise required for compliance.

The Data Controller responsible for the Personal Data of all users of the 100slot Platform is the legal entity operating under the 100slot brand and holding the applicable international online gaming licence. The Company determines the purposes for which Personal Data is collected and the means by which it is processed.

All enquiries regarding the processing of your Personal Data — including requests to exercise your rights as described in Section 12 of this Policy — should be directed to our Data Protection contact at [email protected], clearly marked "Privacy / Data Protection Enquiry."

The categories of Personal Data that 100slot may collect about you, depending on your level of engagement with the Platform, are as follows:

We collect Personal Data through the following means:

5.1 Direct Submission

You provide data directly when you complete our registration form, submit KYC documents, initiate deposits or withdrawals, contact our support team, or update your account profile. All information you voluntarily enter into the Platform is recorded and stored.

5.2 Automated Technical Collection

When you access the Platform, our servers automatically collect certain technical data, including your IP address, browser details, device identifiers, session duration, and page navigation paths. This data is collected via server logs, cookies, and similar tracking technologies as described in Section 11.

5.3 Third-Party Payment Processors

When you make a deposit or withdrawal using Malaysian payment methods — including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, or FPX — we may receive transaction reference data from those payment providers for the purposes of reconciliation, fraud prevention, and KYC compliance. We do not receive or store your full payment credentials.

5.4 Identity Verification Providers

For KYC purposes, the Company may engage accredited third-party identity verification services. These providers process your submitted identity documents on our behalf and return a verification result. Documents submitted for KYC are handled in accordance with the strict data processing agreements in place with such providers.

100slot processes your Personal Data for the following specific purposes:

• Account Management: To create, maintain, and administer your registered account on the Platform, including processing logins, account updates, and security notifications.
• Payment Processing: To facilitate deposits and withdrawals via supported Malaysian payment channels, and to maintain accurate financial records associated with your account.
• Identity Verification (KYC): To verify your identity, age (21+ compliance), and address in fulfilment of our obligations under our international gaming licence and applicable AML/fraud prevention requirements.
• Game Operation: To deliver games, record outcomes, calculate wins and losses, apply bonuses, and maintain the integrity of the gaming environment.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, collusion, and other prohibited activities.
• Customer Support: To respond to your enquiries, process complaints, and provide assistance via live chat, email, or other supported communication channels.
• Responsible Gambling: To implement and manage responsible gambling tools including deposit limits, session timers, self-exclusion, and to identify patterns of play that may indicate problem gambling behaviour.
• Legal Compliance: To comply with applicable laws, respond to lawful requests from authorities, and fulfil obligations arising from our international gaming licence.
• Marketing (with consent): To send you promotional communications, bonus notifications, and personalised offers where you have explicitly opted in to receive such communications.
• Platform Improvement: To analyse usage patterns, resolve technical issues, conduct A/B testing, and improve the overall player experience on the Platform.

The Company processes your Personal Data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual Necessity: Processing required to perform the contract between you and 100slot — i.e., to operate your account, process deposits and withdrawals, and deliver gaming services.
• Legal Obligation: Processing required to comply with legal obligations under our international gaming licence, AML regulations, and applicable data protection frameworks.
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gambling management, where such interests do not override your fundamental rights and freedoms.
• Consent: Processing for marketing communications and the use of non-essential cookies, where you have provided explicit and freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

100slot does not sell, rent, or trade your Personal Data to any third party for their independent commercial purposes. We may disclose your Personal Data to the following categories of recipients under the circumstances described:

8.1 Service Providers (Data Processors)

We engage carefully selected third-party service providers to assist in operating the Platform. These include payment processing partners (such as those enabling Touch 'n Go, DuitNow, FPX, and bank transfer channels), KYC verification providers, fraud detection services, cloud hosting infrastructure providers, live chat software providers, and email delivery services. All such providers are contractually bound to process your data solely on our instructions and in accordance with applicable data protection standards.

8.2 Game Software Providers

Game outcome data and certain session identifiers may be transmitted to the licensed game studio infrastructure powering specific games on the Platform. This is technically necessary for game delivery and RNG certification. No personally identifiable information beyond session tokens is shared with game software providers in normal operation.

8.3 Regulatory and Law Enforcement Authorities

We may disclose Personal Data to competent authorities — including gaming regulators, financial intelligence units, or law enforcement agencies — where required by law, regulatory obligation, court order, or where we reasonably believe disclosure is necessary to prevent or investigate serious criminal activity, including fraud and money laundering.

8.4 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of the Company's business, Personal Data held by the Company may be transferred to the relevant acquirer or successor entity, subject to equivalent data protection obligations.

100slot retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or for such longer period as may be required by applicable legal, regulatory, or licensing obligations.

• Active Account Data: Retained for the duration of your active registration on the Platform.
• KYC Documents: Retained for a minimum of five (5) years following account closure, in accordance with standard anti-money laundering record-keeping obligations under international gaming licences.
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of the transaction.
• Customer Support Records: Retained for a minimum of three (3) years following the closure of the relevant support case.
• Technical Logs: Typically retained for up to twelve (12) months, subject to active investigation requirements.
• Marketing Consent Records: Retained until consent is withdrawn and for a reasonable period thereafter to evidence the consent history.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised in accordance with our internal data lifecycle procedures.

The Company implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• Transport Layer Security (TLS / SSL): All data transmitted between your browser and the Platform is encrypted using 256-bit SSL/TLS encryption.
• Access Controls: Access to personal data within the Company is restricted on a strict need-to-know basis. Staff accessing personal data are subject to confidentiality obligations.
• Two-Factor Authentication (2FA): Available for all registered Member accounts as an optional additional security layer, and mandatory for staff accounts accessing backend systems.
• Regular Security Assessments: The Platform and its supporting infrastructure are subject to periodic penetration testing and security reviews by qualified third-party specialists.
• Incident Response: The Company maintains a documented data breach response procedure. In the event of a breach likely to result in a significant risk to affected individuals, we will notify the relevant supervisory authority and affected users in accordance with applicable obligations.

Notwithstanding the above measures, no data transmission over the internet or data storage system can be guaranteed as completely secure. You acknowledge and accept this inherent risk. You are responsible for maintaining the security of your own account credentials and for notifying us immediately of any suspected unauthorised access.

The 100slot Platform uses cookies and similar tracking technologies to enhance your browsing experience, maintain session state, prevent fraud, and — where consent has been obtained — to analyse usage patterns and deliver personalised content.

11.1 Types of Cookies Used

11.2 Managing Your Cookie Preferences

You may manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to block or delete cookies; however, disabling essential cookies will impair the functionality of the Platform and may prevent you from logging in or conducting transactions. Instructions for managing cookies are available in the help documentation of your browser (Chrome, Firefox, Safari, Edge, etc.).

Subject to applicable law and the limitations described below, you hold the following rights in relation to your Personal Data held by 100slot. You may exercise any of these rights by submitting a written request to [email protected] marked "Data Rights Request." We will respond within thirty (30) calendar days.

• Right of Access: You have the right to request a copy of the Personal Data we hold about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request the correction of inaccurate or incomplete Personal Data. You may update most profile information directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent. Note: this right is subject to overriding legal and regulatory retention obligations (see Section 9).
• Right to Restriction of Processing: You may request that we restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, and to object to direct marketing at any time. Marketing communications include an unsubscribe option in every message.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

The 100slot Platform is strictly restricted to individuals aged 21 years and above. The Company does not knowingly collect or process Personal Data belonging to individuals under the age of 21. Our registration process includes an age declaration, and KYC verification procedures are in place to validate the age of registered Members.

If we discover or are notified that Personal Data has been collected from an individual under the age of 21 — whether through misrepresentation during registration or any other means — the Company will immediately suspend the relevant account, notify the appropriate authorities where required, and take all reasonable steps to delete the collected Personal Data from our systems as promptly as possible.

If you are a parent or guardian and believe that a minor in your care has registered on the Platform, please contact our support team immediately at [email protected] with the subject line "Underage Account Report." We will investigate and act on all such reports as a matter of highest priority.

As an internationally licensed online gaming operator, 100slot may process or transfer your Personal Data to servers or service providers located in jurisdictions outside of Malaysia. These jurisdictions may have data protection frameworks that differ from those applicable in Malaysia.

Where such international transfers occur, the Company ensures that appropriate safeguards are in place to protect your Personal Data, including the use of contractual data processing agreements with receiving entities that impose obligations equivalent to those applicable under internationally recognised privacy standards.

By using the 100slot Platform, you acknowledge and consent to your Personal Data being processed in jurisdictions outside Malaysia as described in this section.

The Company reserves the right to update or modify this Privacy Policy at any time. When changes are made, the "Last Updated" date at the top of this page will be revised accordingly. Where changes are material — meaning they significantly affect how we process your Personal Data or alter your rights — we will endeavour to notify registered Members via email or through a prominent notice on the Platform prior to the changes taking effect.

Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with the revised Policy, you must cease using the Platform and may request account closure by contacting our support team.

We encourage you to review this Policy periodically to stay informed about how 100slot protects your Personal Data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the manner in which 100slot processes your Personal Data, please contact us through any of the following channels:

• 24/7 Live Chat: Available directly on the Platform. Our agents can assist with general privacy queries and direct data rights requests to the appropriate team.
• Email: [email protected] — Please use the subject line "Privacy / Data Protection Enquiry" or "Data Rights Request" as appropriate.

Requests submitted in Bahasa Melayu, Chinese (Mandarin), or English will be accepted and responded to in the same language where possible. The Company aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, we will inform you of any extension to this timeframe.