Privacy Policy – judi100 Malaysia Online Casino & Sportsbook

1 Introduction & Scope

judi100 (referred to herein as "judi100", "we", "us", or "our") is committed to protecting the personal data of every individual who interacts with the judi100 platform at judi100.co and its associated mobile-optimised interfaces (collectively, the "Platform"). This Privacy Policy ("Policy") describes the types of personal data judi100 collects, the purposes for which it is processed, the parties with whom it may be shared, and the rights available to you as a data subject.

This Policy applies to all registered Members of judi100, all visitors to the Platform, and any individual whose personal data judi100 processes in connection with the provision of its services. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy.

This Policy should be read in conjunction with judi100's Terms & Conditions and Responsible Gaming Policy, both of which are available on the Platform.

2 Data Controller

judi100 acts as the data controller in respect of personal data collected through the Platform. As data controller, judi100 determines the purposes and means by which your personal data is processed. judi100 operates under an international gaming authority licence and is subject to the data protection obligations imposed by that licence in addition to applicable privacy legislation.

For all data protection enquiries, including subject access requests and deletion requests, please contact judi100 via the 24/7 live chat function on the Platform or at the support email address set out in Section 14 below.

3 Personal Data We Collect

judi100 collects personal data in the following categories:

4 How We Use Your Data

judi100 processes personal data for the following purposes:

• Account Management: To create, maintain, and administer your judi100 Member account, including identity verification and KYC compliance;
• Service Delivery: To provide access to casino games, sportsbook markets, live dealer tables, and payment processing services on the Platform;
• Regulatory Compliance: To fulfil judi100's obligations under its international gaming authority licence, including anti-money laundering (AML) monitoring, age verification, and responsible gaming obligations;
• Fraud Prevention & Security: To detect, investigate, and prevent fraud, account misuse, money laundering, and other prohibited activities on the Platform;
• Customer Support: To respond to your enquiries, resolve disputes, and deliver effective customer service via live chat and email;
• Marketing Communications: Where you have given your consent, to send you promotional offers, bonus notifications, and updates about new features on judi100 — you may withdraw consent at any time;
• Platform Improvement: To analyse usage patterns, diagnose technical issues, and continuously improve the judi100 Platform experience.

5 Legal Basis for Processing

judi100 processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and judi100 (i.e., to provide you with Platform access and gaming services);
• Legal Obligation: Processing is required for judi100 to comply with its licensing obligations, AML requirements, and applicable law;
• Legitimate Interests: Processing is necessary for judi100's legitimate interests in operating a secure, fraud-free platform, including fraud detection and security monitoring, where such interests are not overridden by your rights;
• Consent: Where required by law, judi100 will seek your explicit consent before processing personal data for marketing purposes. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Cookies & Tracking Technologies

6.1 Essential Cookies. judi100 uses essential session cookies that are strictly necessary to operate the Platform — for example, to maintain your login session and remember your language preferences. These cookies cannot be disabled without impacting core Platform functionality.

6.2 Analytics Cookies. With your consent, judi100 may use first-party analytics cookies to understand how Members use the Platform — which pages are visited most, how long sessions last, and where technical errors occur. This data is aggregated and anonymised. It helps judi100 improve the product experience for all Malaysian members.

6.3 Managing Cookies. You can manage and delete cookies through your browser settings. Disabling non-essential cookies will not prevent you from accessing judi100, though some non-core features may function differently.

7 Third-Party Disclosure

judi100 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. judi100 may disclose personal data to the following categories of third parties in connection with the delivery of its services:

• Payment Processors: Touch n Go eWallet, Boost, GrabPay, Maybank FPX, CIMB Clicks, and other payment providers receive the minimum data necessary to process your deposit or withdrawal transactions;
• KYC Verification Providers: Third-party identity verification services receive Identity Data and documents to perform age and identity checks required under judi100's licence;
• Gaming Software Providers: Game providers (e.g., Evolution Gaming, Pragmatic Play, PG Soft) may receive anonymised session data for game integrity and auditing purposes;
• Regulatory Authorities: judi100 may be required by law or by its licensing authority to disclose personal data to regulators, law enforcement agencies, or financial intelligence units;
• IT & Infrastructure Providers: Hosting, cloud storage, and cybersecurity vendors who support the judi100 Platform are subject to contractual data processing agreements.

All third parties who receive personal data from judi100 are required by contract to process that data only for the specified purpose and to maintain appropriate security standards.

8 International Data Transfers

judi100 is an internationally licensed platform. Some of the third-party service providers described in Section 7 may process personal data in jurisdictions outside Malaysia. Where personal data is transferred internationally, judi100 ensures that appropriate safeguards are in place — including contractual data processing clauses — to protect your personal data to a standard equivalent to that applicable under Malaysian privacy law and judi100's licensing obligations.

9 Data Retention

judi100 retains personal data for the period necessary to fulfil the purposes for which it was collected, and in any event for the minimum retention period required by judi100's licence conditions and applicable law. As a general guide:

• Account and Identity Data is retained for a minimum of five (5) years from the date your account is closed, as required by AML legislation;
• Financial transaction records are retained for a minimum of seven (7) years;
• Gaming session data is retained for two (2) years for dispute resolution purposes;
• Marketing consent records are retained until consent is withdrawn and for one (1) year thereafter.

At the end of the applicable retention period, personal data is securely deleted or anonymised.

10 Security Measures

judi100 implements technical and organisational security measures appropriate to the risk posed by the processing activities. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and the judi100 Platform;
• AES-256 encryption for personal data stored in judi100's databases;
• Role-based access controls ensuring only authorised judi100 personnel can access personal data;
• Regular penetration testing and vulnerability assessments by independent security firms;
• Incident response procedures for personal data breaches, including notification obligations where required by law.

While judi100 employs industry-standard security practices, no system is entirely immune to security risks. You are encouraged to use a strong, unique password for your judi100 account and to enable two-factor authentication.

11 Your Rights

Subject to applicable law and judi100's legitimate interests and legal obligations, you have the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data judi100 holds about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data;
• Right to Erasure: You may request deletion of your personal data where judi100 no longer has a legal basis to retain it (note: this right is subject to our legal retention obligations);
• Right to Restriction: You may request that judi100 restrict the processing of your personal data in certain circumstances;
• Right to Object: You may object to processing carried out on the basis of legitimate interests;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing.

To exercise any of these rights, please contact judi100 support via live chat. judi100 will respond to all valid requests within 30 days.

12 Children & Minors

The judi100 Platform is strictly for individuals aged 21 and above. judi100 does not knowingly collect or process personal data of individuals under the age of 21. If judi100 discovers that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account closed. If you believe that judi100 has inadvertently collected personal data from an underage individual, please contact judi100 support immediately.

13 Changes to This Policy

judi100 reserves the right to update this Privacy Policy at any time. Where changes are material, judi100 will notify registered Members via email or a prominent in-Platform notification. The "Last updated" date at the top of this Policy will be revised accordingly. Continued use of the Platform following notification of changes constitutes acceptance of the revised Policy.

14 Contact Us

For all privacy-related enquiries, data subject access requests, or complaints regarding judi100's handling of your personal data, please contact judi100's Data Protection team via the 24/7 live chat function on the Platform, or by email at: support at judi100.co — this address is provided as plain text and is not a clickable link.

judi100 endeavours to resolve all privacy complaints promptly and in good faith. If you are not satisfied with judi100's response, you may escalate the matter to the relevant data protection authority in your jurisdiction.