100win Official Privacy Document

Privacy Policy 100win — Data Protection Malaysian Users

At 100win, your privacy is not merely a legal obligation — it is a core commitment. This Privacy Policy document transparently explains how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We believe every user has the right to know what happens with their information.

Updated: 1 January 2026
Document Information
Version v2.5 (2026)
Compliance PDPA 2010
Encryption 256-bit SSL
Data Storage Secure Server
User Rights 7 Core Rights

Commitment Privacy We to You

Six core principles that guide how 100win handles the personal data of every user on our platform.

Advanced Data Encryption

All your personal data is transferred and stored using 256-bit SSL encryption — the same security technology used by leading banking and financial institutions in Malaysia.

No Sale of Data to Third Parties

100win never sells, rents, or trades your personal data to third parties for marketing or any other commercial purpose without your explicit consent.

Full Control of Your Data in Your Hands

You have the full right to access, correct, download, or request deletion of your personal data at any time. Simply contact our support team and we will respond within 3 business days.

Malaysia PDPA Compliance

The 100win Privacy Policy is fully drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring lawful and transparent data processing standards at every level.

Secure Server Data Storage

Your data is stored in ISO 27001-certified data centres with redundant backup systems, physical access controls, and 24/7/365 security monitoring.

Data Breach Notification

In the event of any security incident involving your data, 100win is committed to notifying you within 72 hours and taking immediate remedial action in accordance with established procedures.

Types of Data We Collect

A transparent guide covering the categories of personal data collected, the purpose of collection, and the retention period.

Data Category Sample Information Purpose Retention Period
Identity Data Full name, MyKad/passport number, date of birth KYC verification & fraud prevention 7 years after account closure
Contact Data Email, phone number, residential address Account communications & customer support While account is active + 5 years
Financial Data Bank account number, digital wallet ID, transaction records Deposit/withdrawal processing & AML compliance 7 years as required by law
Technical Data IP address, device type, web browser, operating system Account security & fraud detection 2 years
Gaming Data Betting records, wins/losses, platform activity Regulatory compliance & responsible gaming analytics 5 years
Cookie & Analytics Data Session logs, pages visited, buttons clicked User experience enhancement & platform analytics 13 months
Communication Data Support chat logs, inbound/outbound emails, complaints Support records & dispute resolution 3 years

01 Privacy Policy Introduction & Scope

Welcome to the 100win Privacy Policy page. This document is published by 100win Entertainment Sdn Bhd ("100win", "we", "the Company") and applies to all users who access our platform via the website 100win.st, mobile app, or any other digital channel operated by us.

We take our responsibility to protect every user's privacy seriously. As an online wagering platform operating in Malaysia, we are bound by the requirements of the Personal Data Protection Act 2010 (PDPA) and committed to processing your personal data in a lawful, fair, and transparent manner.

This Privacy Policy describes:

  • Types of personal data we collect from you
  • Why we collect that data and its legal basis
  • How we use, store, and protect your data
  • In what circumstances may your data be shared with third parties
  • Your rights as a data subject under PDPA 2010
  • How you can contact us regarding privacy matters
This Privacy Policy is effective from 1 January 2026. By using the 100win platform, you agree to the terms set out in this document. Please read the entire document carefully before registering an account.

02 Personal Data We Collect

100win only collects personal data that is strictly necessary to provide our platform services. Data collection occurs through three main channels: information you provide directly, data automatically generated during platform use, and information obtained from trusted third-party sources.

Data you provide directly:

  • During registration: Full name, email address, phone number, date of birth, and password.
  • During KYC verification: A copy of your MyKad or passport, plus a selfie for identity verification.
  • During financial transactions: Bank account number, card details, digital wallet account ID such as TnG, GrabPay, or FPX.
  • When contacting support: Conversation content, complaints, and additional information you have shared.

Automatically generated data: When you use our platform, the system automatically records your IP address, device type, web browser used, pages visited, session time and duration, and gaming activity logs. This data is essential for security, fraud detection, and continuous platform improvement.

Important Note: 100win does not store full credit or debit card numbers. Card payment processing is handled by PCI-DSS certified payment gateway providers, which supply only secure tokens to our systems.

03 How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. 100win does not use your data for unrelated purposes without first obtaining your consent. The following are the primary purposes for which your personal data is used:

  • Service delivery: Managing your account, processing deposits and withdrawals, and ensuring access to all games and platform features.
  • Identity verification: Meeting KYC and AML requirements set by regulatory authorities to prevent fraud and money laundering.
  • Account security: Detecting suspicious activity, preventing unauthorized access, and protecting your account from security threats.
  • Customer support: Resolving your inquiries, complaints, and technical issues more efficiently and effectively.
  • Service communications: Sending important notifications related to your account, transactions, security updates, and policy changes.
  • Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and offer appropriate support.
  • Platform improvements: Analyzing aggregated usage data to improve platform performance, interface, and overall user experience.
  • Legal compliance: Fulfilling reporting obligations to relevant authorities in accordance with applicable Malaysian law.
100win sends marketing communications only to users who have given explicit consent. You may withdraw this consent at any time through your account settings or by contacting our support team.

04 Data Sharing With Third Parties

100win understands that data sharing is a sensitive matter that requires full transparency. We do not sell your personal data. However, in the context of legitimate business operations, your data may be shared with the following categories of third parties:

  • Payment service providers: Payment gateways, partner banks, and digital wallet providers that securely process your financial transactions.
  • Technology service providers: Cloud computing companies, game software providers, and cybersecurity service providers that help us operate the platform.
  • Regulatory bodies and law enforcement: Lawful authorities such as police, courts, or anti-money laundering bodies when required by law.
  • Professional auditors and consultants: Audit firms, law firms, and consultants bound by strict professional confidentiality obligations.

All third parties we work with are required to sign data processing agreements that meet PDPA 2010 standards and to use your data solely for agreed purposes.

Transfers outside Malaysia: If your data needs to be transferred to servers outside Malaysia, we ensure that the recipient country maintains a level of data protection equivalent to or higher than that required by PDPA 2010.

05 Cookies & Tracking Technologies

The 100win platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and understand how users interact with our platform. The following are the types of cookies we use:

  • Essential cookies (required): Required for the platform to function properly — including login sessions, account security, and language preferences. These cookies cannot be disabled.
  • Performance cookies: Collecting data on how you use the platform to help us identify and resolve performance issues.
  • Functional cookies: Saving your personal preferences such as display settings and game preferences for a more convenient experience in future sessions.
  • Analytics cookies: Helping us understand overall usage patterns in aggregate and anonymized form for continuous platform improvement.

You can manage your cookie preferences through your web browser settings. Please note that disabling essential cookies may affect certain platform functions. For further details on the cookies used, please refer to the privacy settings section in your account.

06 Data Security & Protection Measures

100win continually invests in security infrastructure to protect your personal data from unauthorized access, loss, alteration, or unintended disclosure. The technical and organizational measures we implement include:

  • Data encrypted in transit using TLS 1.3 protocol and at rest using AES-256.
  • Two-factor authentication (2FA) for all administrative access, plus additional security options for user accounts.
  • Round-the-clock security monitoring by an experienced cybersecurity team with real-time intrusion detection systems.
  • Regular penetration testing conducted by recognised independent security firms.
  • Role-based access control (RBAC) ensures that 100win staff can only access data required for their specific responsibilities.
  • Mandatory data security training for all staff who handle users' personal data.
  • A clear incident response procedure with notification timelines that comply with the requirements of PDPA 2010.
Security Certifications: The 100win data centre holds ISO/IEC 27001:2022 certification for information security management, and our payment providers comply with PCI-DSS Level 1 — the most stringent standard in the payments industry.

07 Your Rights as a User Under PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010, you hold the following rights regarding your personal data held by 100win. We are committed to respecting and facilitating the exercise of these rights:

Right of Access

Request a copy of all personal data we hold about you in a readily readable format.

Right to Rectification

Request correction of any inaccurate or incomplete data in our records about you.

Right to Erasure

Request deletion of your personal data, subject to applicable legal retention obligations.

Right to Data Portability

Receive a copy of your data in a structured, machine-readable format for transfer to another platform.

Right to Object

Object to the processing of your data for direct marketing purposes or in certain other circumstances.

Right to Restriction of Processing

Request that we pause active processing of your data while your request is under review.

Right to Withdraw Consent

Withdraw consent previously given for specific data processing at any time, without affecting the validity of processing carried out before withdrawal. Contact us at [email protected] to submit any request relating to your rights. We will respond within 3 business days.

08 Children's Data Protection

The 100win platform is a service intended exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data of children under the age of 18.

If you are a parent or guardian who discovers that your underage child has registered an account on our platform, please contact us immediately at [email protected]. We will investigate the matter promptly, terminate the account in question, and delete all collected data at no charge or penalty.

Warning: 100win employs a multi-layer age verification system that includes date-of-birth verification during registration, official document KYC verification, and account behavior monitoring to ensure no underage individuals use our platform.

09 International Data Transfers

In the context of global digital platform operations, some of your personal data may be processed or stored on servers located outside Malaysia. This occurs primarily when we use cloud computing services or international technical infrastructure to ensure optimal platform performance and availability.

Nevertheless, all international data transfers carried out by 100win comply with the requirements of Section 129 of Malaysia's PDPA 2010. We ensure:

  • The recipient country has data protection laws equivalent to or stricter than those of Malaysia.
  • Legally binding data transfer agreements are signed with every provider outside Malaysia.
  • Data transferred is kept to a minimum — only what is strictly necessary for legitimate technical purposes.
  • Full encryption is applied to all data transfers across international borders.
100win's international infrastructure partners include ISO 27001-certified cloud providers operating across the Asia Pacific region, ensuring low latency and consistent data protection for Malaysian users.

10 Changes To This Privacy Policy

100win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform service improvements. Each new version will be published on this page with a clear effective date.

When we make significant changes, we will notify you via:

  • In-platform notifications that appear when you log in to your account.
  • A notification email will be sent to the email address registered to your account.
  • Updates to the "Last Updated" date shown at the top of this document.

Continued use of the 100win platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you disagree with any changes, you have the right to close your account and request deletion of your data.

Contact Our Privacy Officer: For any enquiries, concerns, or requests related to personal data, email us at [email protected] with the subject line "Privacy Enquiry". We are committed to responding within 3 business days.

Summary Right to Privacy You

As a registered 100win user, you are protected by a comprehensive data protection framework.

PDPA 2010 Protected 256-bit SSL Encryption ISO 27001 Certified Secure KYC PCI-DSS Level 1 No Data Sales 24/7 Support 3 Business Day Response International Compliance Full Data Access Rights

Frequently Asked Questions Privacy

Answers to the most frequently asked questions from 100win users regarding privacy and data protection.

Absolutely not. 100win has never sold, rented, or traded users' personal data to any third party for marketing or any other commercial purpose. Your data is only shared with service providers who help us operate the platform, and they are bound by strict confidentiality agreements in accordance with the requirements of PDPA 2010.

You may submit a data access request by contacting our support team via live chat or email at [email protected] with the subject "Data Access Request". We will verify your identity and provide a copy of your data within 14 business days in a readable format. No fee is charged for the first data access request within any 12-month period.

When your account is closed, 100win will delete or anonymize your personal data that is no longer needed. However, certain data must be retained for specific periods as required by Malaysian law — for example, financial records for 7 years under the Companies Act and AML requirements. After the mandatory retention period ends, your data will be permanently deleted.

Yes, fully. 100win does not store full credit or debit card numbers in our systems. All card payment processing is handled by a PCI-DSS Level 1 certified payment gateway that only transmits secure payment tokens to us. This means that even in the event of a security incident on our systems, your card details remain fully protected.

Yes, you can opt out of marketing emails at any time by clicking the "unsubscribe" link found at the bottom of any promotional email, or by updating your notification preferences in your account settings. Your request will be processed within 5 business days. Please note that important transactional emails related to your account, such as deposit confirmations and security notifications, will continue to be sent.

Reach our 24/7 support team immediately via live chat or email at [email protected]. Our security team will freeze your account instantly to prevent any unauthorized activity, investigate access logs, and help you safely regain control of your account. We recommend changing your password and enabling two-factor authentication (2FA) as soon as your account is recovered.
Malaysia's Trusted Betting Platform

Your Data Is Safe. Play With Peace of Mind at 100win!

Join over 500,000 Malaysian users who have trusted 100win as their preferred online betting platform. Register today and enjoy a welcome bonus of up to MYR 1,888, backed by the highest level of data security.

Bahasa Melayu