Updated: 1 January 2026

Privacy Policy 100kaya

Your privacy is our priority. This document clearly explains how 100kaya collects, uses, stores, and protects your personal data in accordance with applicable data protection laws in Malaysia.

PDPA Compliance 256-bit SSL No Data Sales

100kaya's Six Pillars of Data Protection

We do more than comply with the law — we build robust privacy protection systems because we value your trust.

Full Data Encryption

All personal and financial data transmitted through the 100kaya platform is protected with 256-bit SSL encryption — the same standard used by leading banking institutions.

Strict Access Controls

Your data is accessible only by authorised 100kaya staff for specific purposes. All access is logged and continuously monitored to prevent misuse.

No Third-Party Data Sales

100kaya has never and will never sell, rent, or share your personal data with third parties for marketing or commercial purposes without your explicit consent.

Malaysia PDPA Compliance

Our privacy policy is built in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring your rights as a user are fully protected under local legislation.

Right of Access & Correction

You have the right to access, correct, or request deletion of your personal data at any time. Your request will be processed within 14 working days.

Data Breach Notification

In the event of any security incident involving your data, 100kaya is committed to notifying affected users within the timeframe required by law.


Note: This Privacy Policy describes 100kaya's practices regarding the collection and processing of personal data. By using our platform, you agree to the terms set out here. Please read carefully.

01

Introduction and Scope of This Policy

This Privacy Policy ("Policy") is published by 100kaya and applies to all users who access or use our platform through the official website 100kaya.com and all services related to it. This policy details how we handle your personal information from the point of collection through to storage and deletion.

100kaya recognises that user trust is our most valuable asset. We are therefore committed to managing your personal data with full integrity, transparency, and accountability. Every decision relating to data processing is made with your interests and privacy as the priority.

This Policy defines "personal data" as any information that can be used to identify you directly or indirectly, including your name, identification card number, email address, phone number, financial information, and platform usage data.

02

Personal Data We Collect

100kaya collects various types of data depending on how you interact with our platform. The following are the main categories of data we collect:

Data You Provide Directly

  • Registration information: Full name, date of birth, identity card or passport number, email address, and phone number.
  • KYC information: Copies of identity documents, proof of address, and a verification selfie to meet compliance requirements.
  • Financial information: Bank account details, digital wallet account numbers, and deposit and withdrawal transaction history.
  • Communications: Any messages, complaints, or inquiries you submit to our support team.

Automatically Collected Data

  • Technical data: IP address, device type, operating system, web browser type, and screen resolution.
  • Usage data: Pages visited, games played, session duration, and navigation patterns within the platform.
  • Location data: Approximate location information based on IP address for geo-compliance purposes.
  • Cookies and similar technologies: Information collected via cookies, web beacons, and tracking pixels to enhance the user experience.

100kaya only collects data that is strictly necessary for the stated purposes. We do not collect excessive or irrelevant data beyond what is needed to operate the platform.

Data Categories Example Primary Purpose
Identity Name, IC, date of birth Account verification & KYC
Contact Email, phone number Communication & security
Finance Bank account, transaction history Payment processing
Technical IP, device, browser Security & fraud detection
Usage Pages visited, games played Platform enhancements
03

How We Use Your Data

The personal data we collect is used solely for the following legitimate and stated purposes. We do not process your data for any other purpose without first obtaining your consent:

  • Service provision: To create and manage your account, process deposit and withdrawal transactions, and provide access to all games and platform services.
  • Identity verification: To fulfil KYC and AML (Anti-Money Laundering) requirements mandated by regulatory authorities.
  • Platform security: To detect and prevent fraud, unlawful activity, account misuse, and cybersecurity threats.
  • Service communications: To send important notifications relating to your account, transactions, policy changes, and security information.
  • Continuous improvement: To analyse usage patterns in order to improve the platform's performance, interface, and overall experience.
  • Legal compliance: To comply with legal obligations, regulatory requirements, and directives from relevant authorities.
  • Customer support: To handle inquiries and complaints, and to provide the technical assistance or account support you need.

If you receive marketing communications from us, you may unsubscribe at any time via the unsubscribe link in the relevant email or by contacting our support team.

04

Data Sharing with Third Parties

100kaya takes data sharing responsibilities very seriously. We do not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, there are limited circumstances where data sharing is necessary for platform operations:

Trusted Service Providers

We share necessary data with third-party service providers that help us operate the platform, including payment processors (FPX, Touch 'n Go, GrabPay), cloud service providers, and analytics platforms. All these providers are bound by strict data protection agreements and may only process your data in accordance with our instructions.

Legal Requirements

100kaya may disclose your personal data when required by law, court order, or direction from a legitimate government authority, including law enforcement agencies in investigations involving financial crime or money laundering.

Legitimate Interest Protection

In cases involving fraud, security threats, or serious violations of our terms of use, we reserve the right to share relevant information with the appropriate parties to protect the legitimate interests of the platform and other users.

All third-party providers we work with are selected based on high security and privacy compliance standards. We conduct regular risk assessments of all providers to ensure your data remains protected at all times.

05

Data Storage and Security Measures

Your personal data is stored on secure servers located in high-tier data centres with comprehensive physical and digital protection. 100kaya implements multiple layers of security to ensure the integrity and confidentiality of your data is maintained at all times.

Technical Security Measures

  • Encryption of data in transit using TLS 1.3 protocol.
  • Encryption of data at rest using AES-256 standard.
  • Role-based access control (RBAC) to ensure only authorised personnel can access sensitive data.
  • 24/7 security monitoring with intrusion detection systems (IDS/IPS).
  • Periodic security audits conducted by independent internationally accredited parties.

Data Retention Period

We retain your personal data only for as long as necessary to fulfil the purposes stated in this Policy or as required by law. Generally, active account data is retained for the duration your account remains active, while closed account data is retained for a minimum of five (5) years for AML compliance and audit requirements.

Once the designated retention period has elapsed, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered.

06

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by 100kaya. We are committed to making it easy to exercise these rights, at no charge:

Right of Access

Request a copy of the personal data we hold about you, including information on how it is used.

Right to Rectification

Request correction of any personal data that is inaccurate, incomplete, or outdated in our records.

Right to Erasure

Request the deletion of your personal data under certain circumstances, subject to our legal obligations.

Right to Restriction

Request that we restrict the processing of your data in certain situations while a dispute or review is in progress.

Right to Portability

Request your data in a structured, machine-readable format for transfer to another service provider.

Right to Object

Object to the processing of your data for direct marketing purposes at any time without needing to provide a reason.

To exercise any of the above rights, contact our privacy team by email at [email protected]. Your request will be processed within 14 working days from the date of receipt.

07

Cookie and Tracking Technology Policy

The 100kaya platform uses cookies and similar tracking technologies to enhance your experience, understand how users interact with the platform, and ensure core platform functions operate correctly. The types of cookies we use are as follows:

Cookie Type Purpose Status
Essential Cookies Enables core functions such as login authentication, session security, and basic platform navigation. Required
Preference Cookies Stores your preferences such as language, display settings, and gaming preferences. Options
Analytics Cookies Collects anonymised usage data to help us understand platform performance and user patterns. Options
Security Cookies Detects suspicious activity, unauthorised login attempts, and real-time security threats. Required

You can manage cookie settings through your web browser settings. However, disabling essential cookies may affect platform functionality and performance. Your session, login, and gaming experience may not work properly if essential cookies are turned off.

08

Third-Party Links and Services

The 100kaya platform integrates with select third-party services to deliver a complete gaming experience, including game providers, payment processors, and customer support service providers. Each of these providers maintains their own privacy policy governing data processing on their end.

We ensure that all third-party providers integrated with the 100kaya platform comply with data protection standards equivalent to our own. Legally binding data processing agreements (DPAs) are established with each provider before any integration is implemented.

100kaya is not responsible for the privacy practices of third-party services outside our direct control. We encourage you to read the relevant provider's privacy policy before using their services.

09

Protection of Minors' Privacy

The 100kaya platform is an adult service intended solely for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we find that personal data from individuals below the specified age limit has been collected without our knowledge, we will take immediate action to delete that data and close the relevant account. Parents or guardians who discover that their child has registered an account on our platform are requested to contact our support team immediately.

If you suspect that an individual under 18 years of age is using this platform, please report it to us immediately through our support channels. We take every such report seriously.

10

Amendments to This Privacy Policy

100kaya reserves the right to review and update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform improvements. We will notify you of any significant changes through:

  • A prominent notice on the platform's home page.
  • Email to the address registered on your account.
  • An in-account notice upon your next login.

The "Updated" date at the top of this Policy indicates when the latest amendment took effect. Continued use of the platform following any amendment constitutes your acceptance of the updated policy. If you do not agree with the changes made, you have the right to close your account and discontinue use of the platform.

All previous versions of this Privacy Policy are archived and available upon request for reference or comparison purposes.

11

Contact Our Privacy Officer

If you have any questions, concerns, or wish to exercise your privacy rights, do not hesitate to contact us. Our privacy team is ready to assist you:

We will endeavour to respond to all privacy-related enquiries within 14 working days. For more complex cases requiring thorough investigation, we will keep you informed of the expected resolution timeline.

This Privacy Policy is effective from 1 January 2026. This version supersedes all previous versions of the 100kaya Privacy Policy.


Your data is fully protected

Join 100kaya with Complete Confidence

Our platform is built with security and privacy at its core. Enjoy the best gaming experience with peace of mind — your data is safe with us.

256-bit SSL PDPA Compliance No Data Sales
Bahasa Melayu