PDPA 2010 Data Protection

Privacy Policy 100 Login
Your Data, Our Responsibility

At 100 Login, we understand how sensitive your personal information is. This Privacy Policy transparently explains how we collect, use, store, and protect your data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last Updated: 1 January 2026
Version 3.1
Bahasa Melayu
Our Privacy Commitment
Full compliance with Malaysia's PDPA 2010
No sale of data to third parties
256-bit SSL encryption for all data
Right to access and delete data upon request
Regular security audits by independent parties
Register Securely

100 Login's 6 Core Privacy Principles

Every aspect of data management at 100 Login is guided by six non-negotiable principles

Data Minimisation

We only collect data that is strictly necessary to provide our services. No excessive or irrelevant data is collected beyond what is required to deliver 100 Login's services to you.

Data Minimisation
Absolute Confidentiality

Your personal information – including your name, MyKad number, and financial details – will not be shared, sold, or rented to any third party for marketing purposes without your explicit consent.

No Data Selling
Purpose Limitation

Your data is used solely for the purposes stated in this Privacy Policy. Any new use requires that you be informed and, in most cases, that fresh consent be obtained from you.

Specific Purpose
Technical Security

The 100 Login data infrastructure is protected with 256-bit SSL, hashed password storage, enterprise-grade firewalls, and a round-the-clock intrusion detection system.

256-bit SSL
User Controls

You have full control over your data. The right to access, correct, port, and request deletion of your data is available to all 100 Login users via the account portal or support email.

Full User Rights
PDPA 2010 Compliance

All data operations at 100 Login comply with the Malaysia Personal Data Protection Act 2010. We conduct regular compliance audits and update this policy whenever there are changes to the law.

PDPA Compliant

1Definitions & Scope of Policy

This Privacy Policy ("Policy") describes our privacy practices 100 Login ("Company", "we", "platform") in relation to the collection, use, storage, and protection of personal data of users of our platform in Malaysia.

In this Policy, the following terms carry the meanings as defined:

  • "Personal Data" – Any information that can identify you directly or indirectly, including your name, identification number, address, phone number, and email address
  • "Processing" – Any operation carried out on personal data, including collection, storage, use, disclosure, and deletion
  • "User" – Any individual who accesses or uses the 100 Login platform, whether as a visitor or registered member
  • "PDPA" – Malaysia Personal Data Protection Act 2010 (Act 709)

This Policy applies to all users of the 100 Login platform (100login.app) in Malaysia. By using our platform, you agree to the practices described in this Policy. Please read this Policy together with Terms & Conditions us.

2Personal Data We Collect

100 Login only collects data that is necessary to provide, improve, and protect our services. The following are the categories of data we collect:

2.1 Personal Identification Data

  • Full name as per MyKad
  • MyKad number or passport number
  • Date of birth
  • Gender
  • Nationality and state of residence in Malaysia

2.2 Contact Data

  • Malaysian mobile number (starting with +60)
  • Active email address
  • Residential address (for verification purposes)

2.3 Financial & Transaction Data

  • Digital wallet account details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay)
  • Bank account details for DuitNow and FPX (Maybank2u, CIMB Clicks)
  • Records of all deposit and withdrawal transactions in MYR (RM)
  • Betting history and gaming activity

2.4 Technical & Usage Data

Data TypeExamplePurpose
IP AddressIP address at loginSecurity & fraud prevention
Device InformationDevice model, OS, browserPlatform optimisation
Activity LogLogin times, pages visitedSecurity audit
Location DataState in MalaysiaEligibility verification
Cookies & TrackersLogin sessions, preferencesUser experience

3How We Collect Data

Your data is collected through the following methods:

3.1 Directly From You

  • Registration form: When you open a 100 Login account
  • KYC Process: When you submit identity verification documents
  • Financial transactions: During deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, or ShopeePay
  • Support contact: When you contact our customer support team
  • Surveys & feedback: When you participate in customer satisfaction surveys

3.2 Automatically

When you use the 100 Login platform, our systems automatically collect certain technical data such as your IP address, browser type, device model, and navigation patterns. This data is collected for security purposes and to improve the user experience.

3.3 Via Authorised Third Parties

In certain cases, we may receive information from recognised payment service providers (such as the FPX payment gateway) to verify the status of your transaction. This information is used solely for payment processing purposes.

4Data Usage Purpose

100 Login uses your personal data solely for the following purposes:

  • Account Management: Creating, verifying, and managing your account
  • Transaction Processing: Processing deposits and withdrawals in MYR via Malaysian payment methods
  • Legal Compliance: Fulfilling obligations under PDPA 2010 and other applicable Malaysian laws
  • Fraud Prevention: Identifying and preventing fraud, money laundering, and other illegal activities
  • Customer Support: Responding to enquiries and resolving issues you have reported
  • Platform Improvements: Analysing usage patterns to improve the user experience
  • Service Communications: Sending important notifications regarding your account, transactions, or policy updates
  • Related Marketing: Sending information about promotions and offers with your consent (unsubscribe at any time)

100 Login will not use your data for any purpose not stated above without first obtaining your fresh consent.

5Data Sharing & Disclosure

100 Login does not sell, rent, or trade your personal data to third parties. However, we may share data in very limited circumstances as follows:

5.1 Trusted Service Providers

We engage third-party companies to help deliver our services, including payment service providers that process transactions via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and others. All such providers are bound by strict confidentiality agreements and are not permitted to use your data for any other purpose.

5.2 Legal Requirements

We may disclose your personal data when required by Malaysian law, court order, or a competent authority such as Bank Negara Malaysia, the Companies Commission of Malaysia, or law enforcement authorities.

5.3 Protection of Company Interests

In cases involving fraud, security threats, or serious breaches of our Terms & Conditions, we reserve the right to disclose the necessary information to the relevant parties for investigation or legal action.

In all of the above circumstances, we ensure that only the minimum necessary data is shared, and that all sharing is carried out in accordance with the relevant legal requirements.

6Data Security

Your data security is 100 Login's highest priority. We implement comprehensive technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse.

6.1 Technical Security Measures

  • 256-bit SSL/TLS encryption for all communications between your browser and our servers
  • Passwords are stored using a one-way hashing algorithm (bcrypt) that cannot be decrypted
  • Two-factor authentication (2FA) is available and encouraged for all accounts
  • Enterprise-grade firewall and real-time threat detection system
  • Segregation of financial data from general personal data
  • Encrypted secure data backups stored at separate locations

6.2 Organisational Security Measures

  • Employee data access on a need-to-know basis
  • Mandatory privacy and data security training for all staff
  • Annual security audits by independent third parties
  • Tested and documented data incident response procedures

7Data Retention Period

100 Login retains your personal data for as long as necessary to fulfil the purposes set out in this Policy, or as required by Malaysian law:

Data TypeRetention PeriodReason
Account identification dataDuration of active account + 7 yearsPDPA & anti-money laundering requirements
Financial transaction records7 years from the transaction dateMalaysia tax & financial regulatory requirements
Security & IP logs12 monthsSecurity investigations
Customer support records3 yearsDispute resolution
Market & analytics data24 months (anonymised)Product improvement
Marketing data (with consent)Until consent is withdrawnMarketing communications

Once the retention period has ended, data will be securely deleted or fully anonymised in accordance with approved data disposal procedures.

8Your Rights as a Data Subject

Under Malaysia's PDPA 2010 and the 100 Login Privacy Policy, you have the following rights regarding your personal data:

9Cookies & Tracking Technologies

100 Login uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

9.1 Essential Cookies

These cookies are required for the platform's core functions and cannot be disabled. They include login session cookies, CSRF security tokens, and language preferences. Without these cookies, the platform will not function properly.

9.2 Performance Cookies

These cookies collect anonymous information about how you use the platform — pages visited, time spent, and errors encountered. This information is used to improve platform performance.

9.3 Preference Cookies

These cookies remember your preferences — such as language, display settings, and game preferences — so you don't have to reconfigure them each time you log in.

You can manage cookies through your browser settings. However, disabling essential cookies may affect the functionality of the 100 Login platform. Third-party advertising cookies are not used on our platform.

10Cross-Border Data Transfers

Your personal data is processed and stored primarily on servers located in Malaysia. In cases where data needs to be transferred outside Malaysia (e.g. for international payment processing), 100 Login ensures that:

  • The transfer complies with Malaysian PDPA 2010 requirements
  • The recipient country or party provides an adequate level of data protection
  • Appropriate data transfer agreements have been put in place
  • Transfers are carried out only when necessary and strictly for service purposes

11Child Protection

The 100 Login platform is intended for users aged Aged 18 and above only. We do not knowingly collect personal data from anyone under the age of 18.

If we discover that we have collected personal data from an individual under the age of 18 without verified parental or guardian consent, we will take immediate steps to delete that information. If you believe your minor child has registered an account, please contact us at support@100login.app immediately.

12Privacy Policy Amendments

100 Login reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements.

  • Material amendments will be communicated via email to your registered address at least 14 days before taking effect
  • A notice of changes will be displayed at the top of this page
  • The "Last Updated" date will be revised to reflect the latest version
  • Continued use of the platform after the effective date of any amendment constitutes acceptance of the updated Policy

13Contact Our Privacy Officer

For any enquiries, requests, or complaints regarding this Privacy Policy or the management of your personal data at 100 Login, please contact:

Privacy Officer Email
support@100login.app
Support LiveChat
Available 24/7 via the 100 Login platform

We will respond to all privacy-related enquiries within 5 business days. For requests requiring further investigation, the maximum response period is 30 business days in accordance with PDPA 2010 requirements.

Your Personal Data Rights Under PDPA 2010

As a 100 Login user, you have the following rights, which you may exercise at any time

Right to Access

You have the right to request a copy of all personal data we hold about you. Requests can be submitted via our support email and will be fulfilled within 14 business days.

Right to Rectification

If your data is inaccurate or out of date, you have the right to request a correction. You can update much of your information directly through your 100 Login account settings.

Right to Erasure ("Right to Be Forgotten")

You may request deletion of your personal data when it is no longer needed, or when you withdraw your consent. Requests are subject to legally mandated data retention obligations.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time. Every marketing email contains an unsubscribe link that takes effect immediately.

Data Portability Rights

You have the right to receive your data in a machine-readable format (such as CSV or JSON) for transfer to another platform if required.

Right to Restrict Processing

In certain circumstances, you may request that we restrict the processing of your data – for example, while you are disputing the accuracy of your data or while we are handling your objection.

How to Exercise Your Rights

To exercise any of the above rights, submit a written request to support@100login.app by stating: (1) the type of right you wish to exercise, (2) your account number, and (3) a copy of your identification document. We will process your request within 30 business days.

How We Protect Your Data

Data security is not just a single layer of protection — it is a multi-layered system designed to keep your data safe even if one layer is compromised.

Compliance & Certification
PDPA 2010 256-bit SSL 2FA Ready KYC Verified Independent Audit
1
Data-in-Transit Encryption (SSL/TLS 256-bit)

All data transmitted between your device and our servers is fully encrypted.

Active
2
Data-at-Rest Encryption (AES-256)

Sensitive data stored on our servers is encrypted using AES-256 standard.

Active
3
Two-Factor Authentication (2FA)

An additional security layer for login – available and encouraged for all accounts.

Available
4
Enterprise-Grade Firewall & WAF

Protection against cyberattacks, SQL injection, XSS, and other web-based threats.

Active
5
24/7 Threat Monitoring

An intrusion detection system monitors all platform activity in real time.

Active
6
Annual Independent Security Audit

Independent third parties conduct annual penetration testing and security audits.

Annual

Join 100 Login
A Platform That Respects Your Privacy

Now that you know how we protect your data, register a 100 Login account with confidence. Your privacy, security, and the best betting experience in Malaysia all await you.

By registering, you agree to our Terms & Conditions and this Privacy Policy. For adults aged 18+ only.

Bahasa Melayu