Privacy Policy 100x Asia – Our Commitment to Protecting Malaysian Players' Data

This Privacy Policy is issued by 100x Asia ("we", "platform", "company") and applies to all users, registered members and visitors of 100x.asia as well as any mobile applications associated with our platform. This document comprehensively outlines our privacy practices and gives you a clear understanding of how your personal data is managed within the 100x.

100x takes our responsibilities as a data controller under Malaysia's Personal Data Protection Act 2010 (PDPA) seriously. We believe that transparency in data management is the cornerstone of the trust you place in our platform. With that in mind, this Privacy Policy is written in plain, accessible language – not confusing legal jargon – so that every Malaysian player can fully understand their rights.

This policy covers all aspects of personal data processing related to your use of the platform 100x, including account registration, gaming activity, financial transactions in MYR, customer support interactions, participation in promotional programmes, and all other interactions conducted through our official channels.

100x collects various types of personal data from our players across different contexts. We only collect data that is strictly necessary for legitimate purposes as stated in this policy. The following are the categories of data we collect:

Identity & Registration Data:

• Full name as stated on your official Malaysian identification document
• Malaysian Identity Card number (MyKad) for identity verification (KYC) purposes
• Date of birth for minimum age verification (18 years and above)
• Gender (if provided)
• Current residential address in Malaysia

Contact Data:

• An active Malaysian mobile phone number
• A valid and active email address

Financial & Transaction Data:

• Payment method details used (DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay)
• Records of all deposit and withdrawal transactions in Malaysian Ringgit (RM)
• Betting history and gaming activity for compliance and fraud prevention purposes

Technical & Usage Data:

• The IP address of the device used to access the platform
• Device type, operating system, and web browser
• Login session information including time and location
• Cookie data and device identifiers for security and personalisation of the user experience
• In-platform activity logs for investigation and technical support purposes

All data collected by 100x has a clear and legitimate purpose. We do not process your personal data for purposes unrelated to platform operations without obtaining additional consent from you. The following are the primary purposes of data processing at 100x:

• Account Management: Creating, verifying, and maintaining your player account on the 100x platform securely and consistently
• Identity Verification (KYC): Ensuring every player meets eligibility requirements, including a minimum age of 18 and Malaysian residency status
• Financial Transaction Processing: Processing MYR deposits and withdrawals via legitimate local payment methods, accurately and promptly
• Platform Security: Detecting, investigating and preventing fraud, money laundering, account abuse and other unlawful activities that may affect the platform and other players
• Customer Support: Providing relevant and efficient assistance whenever you contact our customer support team 100x
• Regulatory Compliance: Fulfilling legal and regulatory obligations applicable to the operation of an online casino platform
• Responsible Gaming: Monitoring gameplay patterns to identify signs of potential problem gambling and offering appropriate assistance
• Experience Personalisation: Personalising content, game recommendations and promotional offers based on your preferences and gaming history (with consent)
• Marketing Communications: Sending information about promotional offers, new games and platform news – only to members who have opted in to receive such communications

We apply different legal bases for each data processing purpose – whether that is contract fulfilment, legal obligation, legitimate interest, or your explicit consent. You may withdraw consent for consent-based processing at any time by contacting us.

100x does not sell, rent or trade your personal data to any third party for their own commercial purposes. This is a non-negotiable commitment. However, in the course of running an efficient and secure platform, there are limited situations where we may need to share your data with carefully selected third parties:

• Payment Service Providers: Required transaction information is shared with local payment service providers (such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost and ShopeePay operators) solely for the purpose of processing your deposit and withdrawal transactions in RM
• Game Providers: Required game session data is shared with the relevant game providers (such as Pragmatic Play, Jili Games, and others) for game operational purposes only
• Technology Service Providers: Third parties that provide technical infrastructure, cybersecurity, identity verification or analytics services that help us operate the platform securely
• Legal Authorities: In circumstances where we are required by law or a valid court order to disclose certain information to the relevant law enforcement agencies or regulatory bodies
• Fraud Investigators: Anti-fraud and anti-money laundering agencies in the context of legitimate investigations and in accordance with established procedures

All third parties we work with are bound by data protection agreements that require them to handle your data to no lesser a standard of security and confidentiality than the one we uphold at 100x. We conduct thorough assessments of all third-party partners before granting any access to our players' data.

100x continuously invests in the latest security technologies and procedures to protect your personal data from unauthorised access, disclosure, alteration or destruction. The following are the security layers we employ:

• Data Transmission Encryption: All data transmitted between your device and our servers 100x protected by TLS protocol with 256-bit encryption – the highest security standard in the industry
• Stored Data Encryption: Sensitive data stored in our databases, including financial information and identification numbers, is encrypted using robust algorithms
• Strict Access Controls: Only staff 100x who have been granted specific authorisation to access player personal data, with every access logged and systematically audited
• Two-Factor Authentication: Our internal systems require two-factor authentication for all staff access to player data
• Real-Time Threat Monitoring: An intrusion detection and anomaly monitoring system operating 24/7 to identify and respond to security threats immediately
• Regular Security Testing: Penetration testing and security audits are conducted regularly by independent security experts to identify and address vulnerabilities before they can be exploited
• Multi-Layer Data Backup: Data is regularly backed up to a secure, separate location to ensure prompt recovery in the event of any incident

While we take all reasonable precautions, it must be acknowledged that no security system can guarantee absolute 100% protection in a digital environment. Should any data security breach occur that affects your information, 100x committed to notifying you within the timeframe required by applicable law and taking appropriate remedial action.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have certain rights in relation to your personal data held by 100x. We fully respect and uphold these rights:

• Right of Access: You have the right to request and receive a copy of all personal data we hold about you. Data access requests will be processed within 21 business days.
• Right to Rectification: If the personal data we hold about you is inaccurate, incomplete or out of date, you have the right to request a correction and we are obliged to update it within a reasonable timeframe.
• Right to Erasure: In certain circumstances permitted by law, you may request the deletion of your personal data from our records. Please note, however, that certain legal obligations may prevent us from deleting all of your data in its entirety.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent will not affect the validity of any processing that took place prior to the withdrawal.
• Right to Object to Direct Marketing: You may opt out of receiving marketing communications from 100x at any time via the unsubscribe link in our emails or by contacting our customer support team.

To submit any request regarding your personal data rights, please contact our data compliance team 100x via email at [email protected] with the subject line "Personal Data Rights Request". We will verify your identity before processing any request to ensure the security of your account.

Platform 100x uses cookies and similar tracking technologies to enhance the user experience, maintain session security and understand how players interact with our platform. Cookies are small text files stored on your device by your web browser.

We use several types of cookies, each serving a different function:

You can manage and delete cookies through your web browser settings. Please note, however, that disabling essential cookies may affect the core functionality of the platform 100x including the ability to log in and play securely.

In the course of operating the platform 100x, there may be instances where your personal data needs to be transferred to or processed in countries other than Malaysia — particularly in relation to server infrastructure, international game provider services or global technical support systems.

Any such data transfers will be carried out with adequate safeguards in place to ensure your data receives a level of protection equivalent to that provided under Malaysia's PDPA. This includes:

• Only transferring data to countries or organisations with adequate data protection standards
• Using legally binding, standard data protection agreements with all data recipients outside Malaysia
• Obtaining your consent where required by law before any international data transfer takes place

If you have questions about a specific data transfer involving your information, please contact us through the provided channels and we will furnish you with more detailed information.

100x only retains your personal data for as long as necessary to fulfil the purposes stated in this policy or to comply with applicable legal obligations. Once the appropriate retention period has elapsed, your data will be securely deleted or anonymised.

• Active Account Data: Retained for the duration your account remains active on the platform 100x plus any additional period required by law
• Financial Transaction Data: RM transaction records are retained for a minimum of 7 years in accordance with applicable Malaysian financial and tax legislation
• KYC Data: Identity verification documents are retained for a minimum of 5 years following the termination of the business relationship, in accordance with AML requirements
• Support Communication Logs: Records of communications between you and our support team 100x retained for 2 years for reference and service improvement purposes
• Cookie & Session Data: Deleted in accordance with the retention periods stated in the cookie table above, or when you manually clear cookies through your browser

Once the designated retention period has expired and there are no legal obligations preventing deletion, 100x will systematically delete or anonymise your data in accordance with established security procedures.

If you have any questions, concerns or requests regarding this Privacy Policy or the management of your personal data on the 100x, we encourage you to reach out to us through the following channels:

• Data Compliance Email: [email protected] (with the subject line "Data Privacy Enquiry")
• Live Chat: Available 24 hours a day, 7 days a week via the platform 100x
• Response Time: We are committed to responding to all privacy-related enquiries within 3 business days

100x reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements or changes in how we operate. When material changes are made, we will notify you via email or a prominent notification within the platform 100x.

Continued use of the platform 100x after the effective date of an updated Privacy Policy will be deemed as your acceptance of those changes. We encourage you to review this page periodically to stay informed of our latest privacy practices.