🔒 Privacy Policy

Privacy Policy 100 Online – How We Protect Your Personal Data

At 100 Online, your privacy is more than a legal obligation – it is a commitment we have taken seriously from day one. This Privacy Policy clearly explains what information we collect, how it is used, who it may be shared with, and your rights to control your own data as a member of our platform.

Document Information
Document Version v3.1 – 2026
Date Updated 1 June 2026
Jurisdiction Malaysia (PDPA 2010)
Encryption Standards 256-bit SSL
Language Bahasa Melayu (ms-MY)
Third-Party Data Sharing Not without consent

By using the 100 Online platform, you agree to the terms of this Privacy Policy. Please read it in full before registering.

SSL 256
Data Encryption Standards
PDPA
Malaysian Legal Compliance
0
Data Sold to Advertisers
24/7
Active Security Monitoring

100 Online's Six Privacy Commitments to You

The most important things you need to know about how 100 Online manages and protects the personal data of Malaysian members.

Platform-Wide 256-bit SSL Encryption

Every page, every transaction, and every data exchange on 100 Online is protected by 256-bit SSL encryption – the same security standard used by Malaysia's major banks, including Maybank and CIMB. Your data is never transmitted without full protection.

  • Encryption active across all platform pages
  • SSL certificates are regularly reviewed and renewed
  • Protection during login, deposits, and withdrawals

Data Is Not Sold to Any Party

100 Online has never and will never sell, rent, or trade member personal information to any third party for marketing or commercial purposes. Your data belongs to you – it is not a business asset of ours.

  • No selling of data to advertisers
  • No data sharing without member consent
  • Service providers are bound by strict NDAs

Full Compliance with Malaysia's PDPA 2010

100 Online is in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), the country's primary data protection legislation. This means you have legally protected rights over your personal data.

  • Full PDPA 2010 Malaysia compliance
  • Your data access and correction rights are guaranteed
  • Notification in the event of a data breach

Passwords Stored as Hashes

Your 100 Online account password is never stored in plain text. Our system uses a one-way hashing algorithm, ensuring that no one – including 100 Online's own technical staff – can ever view your actual password.

  • Passwords are hashed using bcrypt
  • No internal access to your password
  • Password reset via email verification or OTP only

Secure Data Servers with Restricted Access

Personal data belonging to 100 Online members is stored on servers protected by strict access controls. Only staff who genuinely require access to specific data in order to carry out their duties are permitted to do so, and all access is logged for audit purposes.

  • Principle of least privilege access
  • Access logs are regularly audited
  • Separation of financial and personal data

Full Control Is in Your Hands

As a 100 Online member, you have the right to access, amend, and request deletion of your personal data. You can also withdraw your marketing consent at any time through your account settings or by contacting our team.

  • Easy access to request your own data
  • Opt out of marketing communications at any time
  • Data deletion requests are processed within 30 days
1

Introduction & Scope of the Privacy Policy

This Privacy Policy ("Policy") is published by 100 Online, operating through the platform at https://100online.best. This policy explains how we collect, store, process, and protect your personal data as a member or user of our platform, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

This Policy applies to all individuals who use the 100 Online platform, including those who register an account, visit the website without registering, contact our support team, or use any of our services including slots, Live Casino, lottery, jackpot, and Sports Betting. By continuing to use the 100 Online platform after reading this Policy, you agree to the data processing practices described herein.

We understand that trust is the foundation of the relationship between 100 Online and our members. Your personal data is not a business asset – it is information you have entrusted to us, and we handle it with the utmost responsibility. If you have any questions about this Policy, our privacy team can be reached at support@100online.best.

Key Definitions

"Personal data" refers to any information that directly or indirectly identifies an individual — including name, phone number, email address, banking information, IP address, and platform activity records. "Processing" covers any operation performed on personal data, including collection, storage, use, disclosure, and deletion.


2

Types of Personal Data We Collect

100 Online collects personal data from you in a number of different situations. Below is a full breakdown of the categories of data we collect and the contexts in which they are collected:

Data Category Example Collected During Status
Identity Data Full name, MyKad number, date of birth Registration & KYC Mandatory
Contact Data Phone number, email address Registration Mandatory
Financial Data Bank account number, e-wallet details, transaction records Deposits & withdrawals Mandatory
Technical Data IP address, browser type, operating system Every login session Automatic
Activity Data Game history, bet types, session duration While playing Automatic
Communication Data Live chat records, support emails, complaints Support interactions Automatic
Location Data State / region based on IP Every session Automatic

We do not collect sensitive data such as your medical information, criminal records, or political views. All data collected is directly relevant to the operational and compliance needs of the 100 Online platform.

Security Notice: 100 Online will never ask for your password via email, live chat, or phone. If you receive any such request claiming to be from 100 Online, do not comply and report it to us immediately.


3

How Your Data Is Used

100 Online processes your personal data on valid legal bases under PDPA 2010, including the performance of a contract (member agreement), legal obligations (such as AML and KYC), and legitimate business interests that do not override your rights. Data usage is as follows:

  • Verifying your identity during registration and prior to processing significant withdrawals
  • Processing deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u, CIMB Clicks, and FPX
  • Provides access to all games — slots, live casino, lottery, jackpot, and Sports Betting
  • Sending essential service communications such as transaction confirmations and account security notifications
  • Managing the VIP programme and automatically calculating reward points
  • Detecting and preventing fraud, money laundering, and multiple account usage
  • Complying with legal and regulatory obligations applicable to online platform operators
  • Provides effective customer support with access to your interaction history
  • Sending marketing communications about promotions and new offers – only if you have previously given your consent
  • Improves the platform experience based on anonymised usage patterns

100 Online does not use your data to make automated decisions that have a legal or significant effect on you without human oversight. All major account-related decisions – such as suspensions or large jackpot withdrawals – are reviewed by trained staff.


4

Data Sharing with Third Parties

100 Online does not sell, rent, or trade members' personal data to any party for marketing purposes. Data sharing only occurs in the following limited situations, and in each case, only the minimum data necessary for that specific purpose is shared:

  • Licensed Malaysian payment providers – Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u, CIMB, and FPX receive the transaction data necessary to process your deposits and withdrawals. They are bound by strict financial security standards.
  • Third-party game providers — Pragmatic Play, PG Soft, Evolution Gaming, Microgaming, and other providers receive anonymised session identifiers to enable gameplay. They do not receive your real name or any financial information.
  • Technical service providers – Server hosting companies, security monitoring services, and technical support providers that help operate the 100 Online platform. All are bound by strict data protection agreements.
  • Law enforcement authorities – Malaysian law enforcement bodies, courts, or regulatory authorities when required by law or a valid court order. 100 Online will notify you of any such request unless prohibited by law from doing so.
Third-Party Provider Protection

All third-party providers who receive 100 Online member data are required to sign a Data Protection Agreement (DPA) that prohibits them from using your data for any purpose beyond what is specified. We conduct regular audits to ensure their ongoing compliance.


5

Data Security Measures

100 Online makes serious investments in security infrastructure to ensure members' personal data is protected against unauthorised access, disclosure, alteration, or loss. The security layers we have in place are as follows:

256-bit SSL Encryption
All data transmitted between your browser and 100 Online's servers is fully encrypted
Active
Static Data Encryption (AES-256)
Data stored in the database is encrypted using the AES-256 standard
Active
Two-Factor Authentication (2FA)
An additional security layer for logins and withdrawals via OTP
Available
Real-Time Fraud Detection System
Automated 24/7 monitoring for suspicious activity across all accounts
Active 24/7
Internal Access Control (RBAC)
Staff may only access data in accordance with their role and operational responsibilities
Enforced
Automated Data Backup
Data is automatically backed up every 6 hours to secure redundant servers
Active

While we take all reasonable steps to protect your data, no security system can be guaranteed to be 100% secure at all times. In the event of a data breach affecting your personal information, 100 Online will notify you and the relevant authorities within the timeframe required by Malaysian law.


6

Cookies, Tracking Technologies & Analytics Data

The 100 Online platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how members use our platform. The types of cookies we use are:

  • Essential Cookies (Mandatory): Required for core platform functions such as maintaining your login session, processing transactions securely, and preventing fraud. These cookies cannot be disabled without affecting platform functionality.
  • Performance & Analytics Cookies: Helps us understand how members use the platform — which pages are visited most, how long sessions last, and where technical issues occur. This data is collected in aggregate and anonymised form.
  • Functional Cookies: Stores your preferences such as your chosen language, last used bet size, and display settings. This allows the platform to remember your choices between sessions.
  • Security Cookies: Used to identify suspicious sessions, protect against CSRF attacks, and verify that requests originate from a legitimate browser rather than a bot.

You can manage cookies through your browser settings. However, disabling essential cookies will affect your ability to log in and use the 100 Online platform normally. Third-party cookies from analytics providers use anonymised data only and cannot be used to identify you personally.


7

Your Personal Data Rights

Under Malaysia's PDPA 2010 and the 100 Online Privacy Policy, you have the following rights regarding your personal data. All rights requests may be submitted by emailing support@100online.best with your account number and proof of identity:

Right of Access

You have the right to request a copy of all personal data we hold about you. Requests will be processed within 21 working days in accordance with PDPA requirements.

Right to Rectification

If any personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Changes are processed within 7 business days.

Right to Erasure

You may request deletion of your personal data when it is no longer required, subject to legal retention obligations (typically 7 years for financial records).

Right to Withdraw Consent

You may withdraw your marketing consent at any time through your account settings. Withdrawal of consent does not affect the validity of any processing carried out prior to that point.

Right to Data Portability

You may request your data in a structured, machine-readable format (CSV or JSON) for transfer to another service provider.

Right to Complain

If you believe 100 Online has violated your privacy rights, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.


8

Data Retention Period

100 Online retains your personal data only for as long as is necessary for the purposes set out in this Policy, or as required by Malaysian law. The following outlines our data retention guidelines:

  • Financial and transaction records: Retained for 7 years after account closure, in accordance with Malaysian financial and tax legal requirements.
  • Identity data (KYC): Retained for the duration of the active account plus 5 years after closure, for AML compliance purposes.
  • Support communication records: Retained for 3 years for dispute resolution and service improvement purposes.
  • Technical data and access logs: Retained for 12 months for security and fraud detection purposes.
  • Gaming activity data: Retained for the duration of the active account and 2 years after closure for Responsible Gaming purposes.
  • Marketing data (where applicable): Deleted within 30 days after you withdraw your marketing consent.

Once the retention period expires, your data is securely deleted using industry-standard data destruction methods, ensuring it cannot be recovered after deletion is carried out.


9

Child Protection

The 100 Online platform is intended solely for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18.

Should we discover that personal data belonging to a minor (under 18 years of age) has been collected without parental or guardian knowledge, we will immediately take the following steps:

  • Suspending the account in question immediately
  • Deleting all personal data belonging to that individual from our systems
  • Returning any outstanding financial balance
  • Notifying a parent or guardian if their contact information is available

If you believe a minor has registered on the 100 Online platform, please contact us immediately at support@100online.best with the relevant supporting evidence.

Parents & Guardians: If you suspect your child is using the 100 Online platform, please contact us immediately. We use age verification systems and identity document monitoring to prevent underage registration, but parental cooperation is essential to this protection effort.


10

Amendments to the Privacy Policy

100 Online reserves the right to update or amend this Privacy Policy from time to time to reflect changes in Malaysian law, industry practices, or the way we operate. Each new version will be published on this page with an updated "Last Updated" date.

When material changes are made to this Policy:

  • A notice will be prominently displayed on this page
  • Active members will receive email notifications for significant changes
  • An in-platform notification may be displayed upon your next login
  • Members are given a 14-day period to review changes before they take effect

Continued use of the 100 Online platform after the effective date of any Privacy Policy update constitutes acceptance of the revised terms. If you do not agree with any changes, you have the right to close your account and request deletion of your data before those changes take effect.


11

Contact Us About Privacy

For any enquiries, requests, or complaints regarding this Privacy Policy or how 100 Online handles your personal data, please reach out to our privacy team through the following channels:

  • Privacy email: support@100online.best with the subject line "Privacy Enquiry" for priority processing
  • In-platform Live Chat — for general enquiries, response within 3 minutes
  • For formal data rights requests (access, correction, deletion) – send an email with a certified copy of your MyKad for identity verification

Our team will acknowledge receipt of your request within 2 business days and provide a full response within 21 business days in accordance with PDPA requirements. For complaints that cannot be resolved internally, you have the right to refer the matter to the Department of Personal Data Protection under Malaysia's Ministry of Communications and Digital.

Privacy Contact Information

Email: support@100online.best
Suggested subject line: "Privacy Enquiry – [Your Account Number]"
Response time: 2 business days (acknowledgement), 21 business days (full response)

100 Online Privacy Policy — What It Means for You as a Malaysian Player

In today's digital age, our personal information is more valuable than we often realise. When you register on any online platform – including 100 Online — you are entrusting them not only with your phone number and email address, but also your financial information, behavioural patterns, and in the case of a gambling platform, something even more personal: how you choose to spend your leisure time and how much you are willing to spend on entertainment. This is not information to be handed over lightly, and we at 100 Online do not take it lightly.

Our decision to build bank-grade security infrastructure from day one — rather than waiting for an incident to occur — was a deliberate choice. 256-bit SSL encryption, non-reversible hashed password storage, and role-based internal access controls all require greater investment than platforms that cut corners. But for 100 Online, this is not a matter of cost – it is the foundation of trust without which our platform would have no reason to exist.

One question Malaysian players frequently ask about online platforms is: "Is my banking information safe?" It's a completely valid concern. When you deposit via Touch 'n Go eWallet or DuitNow into your 100 Online you, here is what actually happens: your payment information is sent directly between you and your e-wallet provider or bank through encrypted channels. 100 Online only receives confirmation that a payment was successful and the amount involved — we do not store card numbers, full account numbers, or your banking security credentials. This means that even in the hypothetical scenario where 100 Online's data were accessed without authorisation, your actual banking information would not be exposed through us.

Compliance with Malaysia's PDPA 2010 is more than just a box-ticking exercise for 100 Online. This means you have legal rights that you are entitled to exercise. If you want to know what data we hold about you, you can request it and we are required to provide you with a copy within 21 days. If you find any information that is inaccurate, we are required to correct it. And if you decide to close your account and want all your data deleted — subject to legal retention requirements for financial records — we will carry that out. These are rights you have, and we should not be making it difficult for you to use them.

Regarding marketing communications policy 100 Online is straightforward: you will only receive promotional emails or offer notifications if you have explicitly given your consent during registration. An opt-out option is included in every promotional email we send and can be actioned in a single click. We will not chase you with unsolicited messages, and withdrawing your marketing consent will have no impact on your account or gaming experience in any way.

Finally, the most important thing for you to remember: 100 Online never asks for your password through any channel — email, live chat, WhatsApp, or phone. If you receive any communication claiming to be from 100 Online that requests your password or account security details, it is a scam (phishing). Please do not comply, and report it to us immediately so we can take action. Your account security starts with your own vigilance, and we are committed to helping educate our player community about relevant cybersecurity threats.

FAQ — 100 Online Privacy Policy

The most frequently asked questions from Malaysian members on how 100 Online manages their personal data.

No. 100 Online does not sell, rent, or share member personal data with advertising companies, social media platforms, or any third-party marketing entities. This is a commitment we hold firm. Your activity data – including the types of games you play, deposit amounts, and usage patterns – is used internally to improve our services and manage your VIP programme. It is never used to build advertising profiles or sold to data brokers. The only situations in which your data is shared with external parties are for payment processing via Touch 'n Go, GrabPay, DuitNow, and others, and when required by Malaysian law.

To request a copy of your personal data (right of access under PDPA 2010), send an email to support@100online.best with the subject line "Data Access Request – [Your Account Number]". Please include a copy of your MyKad for identity verification. This step is required to ensure we only disclose data to the legitimate account holder — we cannot release data to anyone claiming to be you without proper verification. Our team will acknowledge your request within 2 business days and provide a full data report within 21 business days, in accordance with PDPA requirements. Data will be provided in a readable format and will include account information, transaction history, gameplay records, and relevant support communications.

When you close your 100 Online account, your data is not deleted immediately, as there are legal retention requirements we are obligated to comply with. Financial and transaction records must be retained for 7 years under Malaysian financial law. Identity (KYC) data is kept for 5 years after account closure for AML compliance purposes. Marketing data and your saved preferences are deleted within 30 days of account closure. Once the mandatory retention period has lapsed, all your data is securely deleted using methods that ensure it cannot be recovered. If you close your account and later wish to register again, you will need to go through the registration and KYC process from scratch, as your previous data will have been deleted.

There are three straightforward ways to stop receiving marketing communications from 100 Online. The quickest is to click the "Unsubscribe" link at the bottom of any promotional email we send – your request will be processed automatically within 48 hours. The second way is through your account settings on the platform – go to Profile > Notification Settings and turn off the marketing communications option. The third is to contact our support team via live chat or email at support@100online.best. Please note that withdrawing your marketing consent does not mean you will stop receiving important service communications such as transaction confirmations, account security alerts, or responses to your enquiries – these are an essential part of our service and cannot be disabled while your account remains active.
Play with Confidence

Your Data Is Safe at 100 Online – Register Today

Now you know how we protect your privacy. 256-bit SSL encryption, no data selling, full PDPA compliance, and control firmly in your hands. Register for free and play with peace of mind at 100 Online.

SSL 256
Data Encryption
PDPA
Malaysian Compliance
0
Data Sold
24/7
Security Monitoring

Please also read Terms & Conditions and Responsible Gaming us. Minimum age 18.

Bahasa Melayu