Judi100 Privacy Policy

This Privacy Policy ("Policy") sets out how Judi100 ("the Platform", "we", "us", "our"), operator of the online gambling platform accessible at https://judi100.cam, collects, uses, stores, shares, and protects the personal data of users ("Player", "User", "you") who register an account, visit the website, or otherwise interact with our services.

We serve players across Malaysia, including those located in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across all Malaysian states and territories. This Policy reflects our commitment to handling personal data responsibly, transparently, and in accordance with applicable data protection principles and our regulatory obligations as an online gambling operator.

By registering an account or accessing any part of the Judi100 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions, which are accessible at https://judi100.cam/terms-conditions.

For the purposes of this Privacy Policy, the following terms have the meanings assigned to them below:

We collect the following categories of personal data in connection with your use of the Judi100 platform:

We do not collect sensitive personal data categories (such as health data, religious beliefs, or biometric data) unless strictly required by specific regulatory obligations, in which case your explicit consent will be sought separately.

We collect personal data through the following channels and methods:

• Direct submission: Data you provide when completing the account registration form, submitting KYC documentation (e.g., uploading a copy of your Malaysian MyKad or passport), contacting support, or completing any other form on the platform.
• Automated collection: Technical and usage data collected automatically when you access the platform, including through cookies, web beacons, server logs, and similar tracking technologies.
• Payment processors: Transaction confirmation data received from payment service providers including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank, as well as cryptocurrency transaction data from blockchain networks.
• Third-party identity verification services: Where we engage third-party KYC/AML service providers to assist with identity verification, data received from those providers may supplement your account record.
• Publicly available sources: Where permitted by applicable law, we may supplement your data with information from publicly available databases for the purposes of fraud prevention or regulatory compliance.

We process your personal data for the following defined purposes:

• Account management: To create, maintain, and administer your Judi100 account, including authentication and session management.
• Identity and age verification: To confirm that you meet the minimum age requirement of 21 years and that your identity corresponds to the details provided at registration, in compliance with our KYC obligations.
• Payment processing: To facilitate deposits and withdrawals in MYR via your selected payment method, and to maintain accurate transaction records.
• Customer support: To respond to enquiries, resolve complaints, and provide technical assistance via live chat or email.
• Responsible gambling: To monitor player activity for indicators of problem gambling behaviour and to apply self-exclusion, deposit limit, or cooling-off measures where appropriate or requested.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account abuse, and other prohibited activities as defined in our Terms & Conditions.
• AML compliance: To conduct transaction monitoring, screen against sanctions lists, and file required regulatory reports in accordance with anti-money laundering obligations.
• Marketing communications: To send you promotional offers, bonus notifications, and relevant platform updates — only where you have not opted out of marketing communications.
• Platform improvement: To analyse aggregated usage data, identify technical issues, and improve the functionality and user experience of the platform.
• Legal compliance: To fulfil any applicable legal or regulatory obligations that require the retention or disclosure of personal data.

We process your personal data on the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual necessity: Processing necessary to fulfil our obligations to you under our Terms & Conditions — including account registration, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and data retention obligations.
• Legitimate interests: Processing necessary for our legitimate interests in operating a secure, compliant, and fraud-free platform — including fraud detection, security monitoring, and platform analytics — provided these interests are not overridden by your rights and interests.
• Consent: Where we rely on consent as a legal basis — such as for non-essential marketing communications or optional cookies — you are free to withdraw that consent at any time by contacting our support team or adjusting your browser cookie settings.

Judi100 does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties where necessary and lawful:

• Payment service providers: Personal and financial data is shared with payment processors — including e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay), banking networks (Maybank, CIMB, Public Bank, Hong Leong via DuitNow/FPX), and cryptocurrency infrastructure — strictly to the extent necessary to process your transactions.
• Identity verification providers: KYC documentation may be shared with third-party identity verification service providers engaged to assist us in fulfilling our regulatory obligations.
• Regulatory and law enforcement authorities: We are required by law to report certain activities to relevant regulatory or law enforcement authorities. We will disclose personal data in response to valid legal requests, court orders, or where we determine in good faith that disclosure is necessary to prevent fraud or protect legal rights.
• Professional advisers: Legal counsel, auditors, and compliance consultants may have access to personal data to the extent necessary for the provision of their professional services, subject to confidentiality obligations.
• Platform infrastructure providers: Hosting, content delivery, and analytics service providers who process data on our behalf under contractual data processing agreements.

All third-party service providers with whom we share personal data are required to handle it in accordance with applicable data protection standards and may not use it for their own independent purposes beyond the scope of the services they provide to us.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status, plus a minimum post-closure retention period required for AML and regulatory compliance purposes.
• KYC documentation: Retained for a minimum of five (5) years following account closure, or longer where required by applicable AML regulations.
• Transaction records: Financial transaction records are retained for a minimum of five (5) years in compliance with AML record-keeping requirements.
• Customer support records: Support communications are retained for up to three (3) years to facilitate dispute resolution and service quality management.
• Technical and log data: Server logs and security-related technical data are retained for a period sufficient to support fraud investigations and security reviews, typically not exceeding twelve (12) months unless a specific investigation requires longer retention.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification.

Judi100 implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers.
• Encrypted storage of sensitive personal and financial data at rest.
• Strict access controls limiting personal data access to authorised personnel with a legitimate operational need.
• Multi-factor authentication requirements for administrative access to systems holding personal data.
• Regular security assessments, penetration testing, and vulnerability scans of platform infrastructure.
• Incident response procedures to detect, contain, and report personal data breaches in a timely manner.

The Judi100 platform uses cookies and similar tracking technologies to operate effectively, improve your experience, and gather aggregated analytics data. A cookie is a small text file stored on your device when you visit our website.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function correctly, including session management, authentication, and security features. These cookies cannot be disabled without impairing core platform functionality.
• Functional Cookies: Enable personalisation features such as remembering your language preferences, display settings, and recent activity within your session.
• Analytical Cookies: Collect anonymised data about how visitors use our platform — including pages visited, session duration, and navigation patterns — to help us improve platform performance and content quality.
• Security and Fraud Detection Cookies: Support our fraud prevention and security monitoring systems by helping to identify unusual or potentially fraudulent access patterns.

You can manage or delete cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the platform. For detailed instructions on managing cookies in your browser, refer to your browser's help documentation.

You have the following rights in relation to your personal data held by Judi100. To exercise any of these rights, please contact our support team via live chat or email at [email protected]. We will acknowledge your request and respond within a reasonable timeframe.

We will not charge a fee for handling data rights requests unless requests are manifestly unfounded or excessive. In such cases, we reserve the right to charge a reasonable administrative fee or decline the request, with written explanation provided.

The Judi100 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in our account registration and KYC process.

If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on our platform or that we have inadvertently collected data from a minor, please notify us immediately by contacting our support team.

Adults who share devices with minors are encouraged to use password protection on their devices and to keep their Judi100 account credentials strictly confidential to prevent unauthorised access by underage individuals.

The Judi100 platform integrates with various third-party service providers to deliver core functionality, including payment processing (via services such as Touch 'n Go eWallet, DuitNow, FPX, and cryptocurrency networks), identity verification services, and platform analytics. Each of these providers operates under their own privacy terms and data processing agreements.

We do not operate outbound links to external third-party websites for marketing or advertising purposes. Where third-party services are integrated into the platform for operational purposes, we ensure that appropriate contractual safeguards are in place governing how those parties handle any personal data they receive on our behalf.

Judi100 is not responsible for the privacy practices of any third party beyond the scope of the data processing agreements we have in place with them. If you have concerns about how a specific third-party service provider handles your data, please review their independent privacy policy.

Judi100 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or operational requirements. The effective date and last-updated date at the top of this Policy will be revised accordingly whenever material changes are made.

Where changes are material, we will notify registered players via email or through a prominent notice on the platform prior to the changes taking effect. Your continued use of the platform following notification of a revised Policy constitutes acceptance of the updated terms.

We encourage you to review this Policy periodically to remain informed about how we protect your information.

For any questions, concerns, or requests relating to this Privacy Policy or our data handling practices — including requests to exercise your data rights — please contact us through the following channels:

Please note that for us to process data rights requests, we may need to verify your identity before taking action. This is to ensure that personal data is only disclosed or modified in response to legitimate requests from the account holder.