100 Slots Privacy Policy – Malaysia Player Data Protection

100 Slots takes its responsibility to protect the privacy of every member who entrusts us with their personal information seriously. This Privacy Policy ("Policy") has been drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and sets out our privacy practices in full, clearly and without confusing technical language.

This Policy applies to all personal information collected through:

• Website and online platform 100 Slots at 100slots.xyz;
• Registration forms and identity verification processes;
• Interactions with the customer support team via live chat or email;
• Gaming activity, deposit and withdrawal transactions;
• Any other communications between you and 100 Slots.

By accessing and using the 100 Slots, you confirm that you have read and understood this Privacy Policy. If you disagree with any part of this Policy, please discontinue use of our platform and contact customer support for assistance with closing your account.

100 Slots only collects information that is genuinely necessary to provide our services safely and effectively. We do not collect excessive or irrelevant data. The types of information we collect are as follows:

Information you provide directly to us:

• Registration information: Full name, email address, phone number, date of birth and password when you create an account 100 Slots;
• Identity verification information: A copy of your MyKad, passport, or other identity document that we request for the KYC (Know Your Customer) process in compliance with legal requirements;
• Financial information: E-wallet account details (Touch 'n Go, GrabPay, Boost, ShopeePay), bank account numbers or FPX information required to process your deposits and withdrawals;
• Communications: The content of messages, complaints, and enquiries you submit to our customer support team 100 Slots.

Automatically collected information:

• Technical data: IP address, web browser type and version, operating system, device type, and screen resolution;
• Log data: Login times and dates, pages visited, actions taken within the platform, and session duration;
• Gaming data: Betting records, slots rounds played, game outcomes, wins, and losses for audit and responsible gaming purposes;
• Cookie data: Information collected through cookies and similar tracking technologies — see Section 6 for further details.

100 Slots only uses your personal data for legitimate purposes to which you have given explicit or implied consent through your use of our platform. The primary purposes are:

• Account management: Creating and managing your account, verifying your identity and keeping your account secure;
• Transaction processing: Processes deposits via Touch 'n Go, GrabPay, DuitNow, FPX, and other Malaysian payment methods, and handles your withdrawals quickly and securely;
• Service provision: Giving you access to play over 500 slots, blackjack, roulette, football and live casino games on the 100 Slots;
• Customer support: Responding to enquiries, resolving complaints, and providing the technical assistance you need via 24/7 live chat;
• Security & fraud prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, and platform abuse;
• Legal compliance: Fulfil Malaysian legal obligations including KYC, AML (Anti-Money Laundering) requirements, and reporting to relevant authorities where required;
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate self-control tools;
• Service improvement: Analysing aggregated, non-identifiable data to understand how the platform is used and to make meaningful improvements;
• Marketing communications: Sending notifications about promotions, bonuses, and special offers — you may opt out of receiving these communications at any time through your account settings.

100 Slots does not and will never sell, rent, or trade your personal data to any third party for their own commercial purposes. This is our absolute commitment to you.

However, in the course of operating the platform, we may need to share your personal information with the following categories of third parties within very limited bounds:

• Payment providers: Required transaction information is shared with Malaysian e-wallet and FPX providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks) solely for the purpose of processing your transactions. These providers are governed by their own privacy policies and security standards;
• Game providers: Usernames and minimal session data shared with world-class game providers such as Pragmatic Play, PG Soft and NetEnt to enable access to their games. No financial information or full identity details are shared;
• Technical service providers: Companies that assist us in operating our technical infrastructure, cloud services, and cybersecurity support – all bound by strict confidentiality agreements;
• Law enforcement authorities: We may be required under Malaysian law to disclose certain information to authorities such as the police, courts, or financial regulatory bodies when lawfully directed to do so;
• Business transfer: In the event of a merger, acquisition, or sale of platform assets, personal data may be transferred — you will be notified in advance and your rights will be preserved.

All third parties with whom we share data are bound by data processing agreements that require them to protect your information to a standard comparable to our own.

100 Slots continuously invest in the latest security infrastructure to ensure your personal data is always protected against unauthorised access, disclosure, alteration, or destruction. The security measures we have in place include:

• 256-bit SSL Encryption: All data transmitted between your browser and the 100 Slots is fully encrypted using the latest TLS protocol. This means no one can intercept and read your information in transit;
• Data-at-rest encryption: Sensitive data stored in our databases, such as passwords and financial information, is encrypted using robust cryptographic algorithms;
• Two-factor authentication (2FA): We provide and encourage the use of 2FA for all accounts to add an extra layer of protection against unauthorised access;
• Strict access controls: Access to players' personal data within the organisation 100 Slots is restricted to staff who genuinely require the information to carry out their duties, based on the principle of least privilege;
• 24/7 security monitoring: An automated threat detection system that continuously monitors for suspicious activity and responds immediately upon detecting a threat;
• Regular security audits: Platform 100 Slots undergo periodic penetration testing and security audits conducted by independent experts;
• Staff training: All staff 100 Slots undergo regular data protection and cybersecurity training.

Platform 100 Slots uses cookies and similar tracking technologies to enhance your experience, maintain session security and understand how our platform is used. The types of cookies we use are as follows:

You can control and manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the platform 100 Slots.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold about you:

• Right to access: You may request a copy of all personal data we hold about you. We will process this request within 21 business days from the date the request is received;
• Right to Rectification: If you find that the personal data we hold about you is inaccurate, incomplete, or outdated, you have the right to request a correction and we will update it within a reasonable timeframe;
• Right to withdraw consent: You may withdraw your consent to the processing of your personal data at any time, subject to legal limitations. Withdrawal of consent does not affect the validity of processing carried out prior to the withdrawal;
• Right to object to direct marketing: You can stop receiving marketing communications from 100 Slots at any time by clicking the "unsubscribe" link in our emails or through the notification settings in your account;
• Right to request erasure: You may request the deletion of your personal data, subject to our obligation to retain certain data for legal, audit, or security purposes.

To exercise any of the rights above, please contact us via:

• Email: support@100slots.xyz with the subject line "Data Privacy Rights Request";
• In-platform live chat 100 Slots available 24 hours a day, 7 days a week;
• Through the privacy request form in your Account Settings section.

We are committed to responding to all data rights requests within the timeframes stipulated under Malaysia's PDPA. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.

Platform 100 Slots is intended solely for individuals aged 18 and above. We do not knowingly collect, store, or process any personal data from individuals under the age of 18.

If we discover or become aware that we have collected data from a person under the age of 18, we will take immediate action to:

• Suspending the relevant account immediately;
• Deleting all related personal data from our systems as promptly as possible;
• Returning any applicable account balance in accordance with established procedures.

If you, as a parent or guardian, believe that your underage child has registered on the platform 100 Slots, please contact us immediately at support@100slots.xyz so that we may take the appropriate action without delay.

100 Slots reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new Malaysian legal requirements, or developments in the technologies we use.

When we make material changes to this Policy, we will:

• Updating the "Last Updated" date displayed at the top of this page;
• Displaying clear notices within the platform 100 Slots upon your next login;
• Sending email notifications to the address registered with your account for any significant changes.

We encourage you to review this Privacy Policy page periodically to stay informed about how we protect your information. Continued use of the 100 Slots after the amendments take effect will be considered your acceptance of the updated Policy.

If you have any questions, concerns or requests regarding this Privacy Policy or how 100 Slots manage your personal data, you are welcome to reach out to us through any of the following channels:

All data privacy enquiries will be handled by our dedicated team, trained in PDPA compliance. We are committed to responding to all privacy enquiries within 5 business days, and for more comprehensive data access requests, within 21 business days as required by law.