CT100 Full Privacy Policy
This document is the official CT100 Privacy Policy, outlining our data protection practices. By registering for or using the CT100 platform, you agree to the collection and use of data as described herein. If you have any questions or concerns, please reach out to us at [email protected].
1Types of Personal Data CT100 Collects
CT100 collects various categories of personal information when you register, use the platform, and interact with our services. All data collected can be grouped into three main categories:
Personal Identification Data
Full name, date of birth, identification card number, email address, mobile number and residential address. This data is collected during the ct100 account registration process and the Know Your Customer (KYC) identity verification process.
Financial & Transaction Data
Deposit and withdrawal records, payment methods used (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX), transaction history and account balance. This data is required to process payments and comply with anti-money laundering (AML) requirements.
Gaming Activity Data
Game history, types of games played (slots, Live Casino, table games), betting records, wins and losses, session duration and activity patterns. This data is used for platform improvement and responsible gambling monitoring.
Technical & Device Data
IP address, device type, operating system, web browser type, screen resolution and general location data. This technical data is collected automatically for security, fraud detection and performance optimisation of the CT100 platform on your mobile device.
Important Note
CT100 does not directly collect credit or debit card numbers. All financial transactions are processed through third-party payment service providers that comply with PCI-DSS security standards. CT100 only receives transaction confirmation details — not your full payment card information.
2How CT100 Uses Your Personal Data
Every piece of data collected by ct100 has a clear and legitimate purpose. We do not use your data for any undisclosed purpose without first obtaining your consent. The following are the primary purposes for which personal data is used at ct100:
- Account Management & Identity Verification: Verifying your identity during registration, login and the KYC process to meet anti-money laundering compliance requirements.
- Financial Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u and CIMB Clicks, as well as securely processing withdrawals to your account.
- Gaming Services Provision: Running slots, Live Casino and table games correctly, maintaining records of wins and losses, and calculating the bonuses and promotions you are entitled to.
- Customer Support: Assisting ct100's 24/7 support team in resolving your enquiries, complaints and technical issues accurately and effectively.
- Responsible Gaming Monitoring: Identifying gaming patterns that may indicate problem gambling risk and reaching out to you with appropriate guidance in line with CT100's responsible gaming programme.
- Fraud Detection & Security: Detecting and preventing fraudulent activity, multiple account ownership, money laundering and platform abuse.
- Platform Improvements: Analysing anonymised usage data to improve the interface, performance and overall gaming experience on ct100.
- Marketing Communications (With Consent): Sending information about ct100 promotions, bonuses and new features exclusively to players who have given explicit consent to receive such communications.
Regarding Marketing Communications
If you no longer wish to receive promotional emails from CT100, you can unsubscribe at any time by clicking the "unsubscribe" link in any email you receive, or by updating your communication preferences in your CT100 account settings. This choice does not affect important account-related communications such as transaction confirmations or security notifications.
3Data Sharing with Third Parties
CT100 has a strict policy regarding the sharing of players' personal data. We do not sell or rent your data to any party for third-party marketing purposes. However, there are limited situations where CT100 needs to share data with certain parties to keep the platform functioning properly:
- Payment Service Providers: CT100 shares the necessary transaction details with e-wallet providers such as Touch 'n Go, GrabPay, Boost and ShopeePay, as well as FPX providers, to process your deposits and withdrawals. All these providers are bound by strict data protection agreements.
- Gaming Software Providers: Gaming session information is shared with licensed game providers to enable slots, live casino, and table games to function correctly. These providers do not receive your personally identifiable information.
- Identity Verification Service Providers: For the KYC process, CT100 works with authorised third-party identity verification providers to securely verify your identification documents.
- Statutory Authorities: CT100 will disclose personal data to the relevant authorities — such as the Royal Malaysia Police or other government agencies — when required by law, court order, or regulatory compliance investigations.
- Approved Business Partners: In certain circumstances, ct100 may share data with approved business partners for platform operational purposes — subject to binding data protection agreements and strictly limited to the stated purposes.
Every third party that receives data from CT100 is bound by a comprehensive data protection agreement requiring them to uphold security standards equivalent to or exceeding those of CT100. CT100 conducts periodic reviews of its third-party partners to ensure ongoing compliance with data protection requirements.
4CT100 Data Security Measures
CT100 continually invests in the most advanced security infrastructure to protect the personal and financial data of all our Malaysian players. Our technical and organisational security measures include:
- 256-bit SSL Encryption: All communications between your device and ct100 servers are encrypted using TLS 1.3 with 256-bit encryption. No data is transmitted unencrypted over the internet.
- Secure & Protected Servers: ct100 data is stored in certified data centres with strict physical access controls, intrusion prevention systems (IPS), multi-layered firewalls and 24/7 monitoring.
- Two-Factor Authentication (2FA): ct100 offers 2FA for all accounts, adding an extra layer of security that keeps your account protected even if your password is compromised.
- Unusual Activity Monitoring: CT100's automated monitoring system continuously tracks login patterns and transactions to detect suspicious activity and take immediate action when necessary.
- Regular Security Audits: ct100 conducts regular penetration testing and independent security audits to identify and patch any security vulnerabilities before they can be exploited.
- Staff Training: All ct100 staff with access to player data undergo regular data protection training and are subject to strict role-based access control (RBAC) policies.
Protective Measures on Your End
While CT100 takes every reasonable step to protect your data, the security of your account also depends on your own actions. Use a strong and unique password for your CT100 account, enable 2FA, never share your login credentials with anyone, and contact us immediately if you suspect any unauthorised activity on your account.
5Cookies & Tracking Technologies
CT100 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device when you visit CT100. The following are the categories of cookies we use:
- Essential Cookies (Required): These cookies are essential for the CT100 platform to function properly. They manage your login session, ensure transaction security and enable core platform features to operate. You cannot disable essential cookies without affecting the functionality of the platform.
- Performance & Analytics Cookies: CT100 uses analytics cookies to understand how players interact with the platform — which pages are most popular, where players encounter difficulties, and how to improve the overall experience. This data is collected in anonymised form.
- Functional Cookies: These cookies remember your preferences — such as language, display theme and game settings — so you do not need to reconfigure them every time you visit CT100.
- Security Cookies: Used to detect suspicious login attempts, verify the origin of transactions, and protect your CT100 account from unauthorised access.
You can manage your cookie preferences through your web browser settings. Disabling non-essential cookies may affect certain CT100 platform features but will not prevent you from using the platform's core functions. For more information on managing cookies on your device, refer to your web browser's help guide or your mobile device's operating system settings.
6Personal Data Retention Period
CT100 retains your personal data only for as long as necessary to fulfil the original purpose of collection and to meet applicable legal obligations. The following provides a general guide to data retention periods at CT100:
- Financial Transaction Records: Retained for a minimum of 7 years from the transaction date to comply with financial reporting and anti-money laundering requirements set by Malaysian authorities.
- Identity Verification Data (KYC): Retained for the duration of account activity plus 5 years following account closure, in line with regulatory compliance requirements.
- Game History: Retained for 3 years for dispute resolution and responsible gaming monitoring purposes.
- Support Communication Logs: Live chat and email conversation records with the CT100 support team are retained for 2 years for reference and service improvement purposes.
- Technical Data & System Logs: Access logs and technical diagnostic data are retained for 12 months for security and technical troubleshooting purposes.
Once the stipulated retention period has lapsed, your personal data will be permanently deleted or anonymised from CT100's systems in accordance with secure and certified data disposal procedures. Please note, however, that certain data may need to be retained for a longer period if there is an ongoing investigation, legal dispute, or specific regulatory compliance requirement that necessitates its continued availability.
7Your Privacy Rights as a CT100 Player
As a CT100 player, you have important rights in relation to your personal data. CT100 is committed to respecting and facilitating the exercise of these rights:
👁️
Right to Access
You have the right to request a copy of all personal data that ct100 holds about you. Requests will be processed within 14 business days.
✏️
Right to Rectification
If any of your data is inaccurate or out of date, you may request that ct100 correct it promptly via your account settings or through customer support.
🗑️
Right to Erasure
You may request the deletion of your personal data when it is no longer needed for the stated purposes, subject to applicable legal obligations.
🚫
Right to Object
You may object to the processing of your data for direct marketing purposes at any time, and CT100 will cease using your data for that purpose immediately.
📦
Right to Data Portability
You have the right to receive your personal data in a machine-readable format to enable data portability should you require it.
⏸️
Right to Restriction of Processing
In certain circumstances, you may request that CT100 restrict how your data is processed while a dispute or query is being resolved.
To exercise any of the rights above, please submit a written request to [email protected], clearly stating the right you wish to exercise along with your account details for identity verification purposes. CT100 will acknowledge receipt of your request within 3 business days and provide a full response within 14 business days from the date your identity is verified.
8Protection of Children & Minors
Ct100 takes the protection of children and minors extremely seriously. The ct100 platform is intended exclusively for individuals aged 21 and above, and ct100 does not knowingly collect personal data from anyone below that age.
- All registration applicants are required to confirm that they are at least 21 years of age during the registration process.
- Ct100 uses age verification mechanisms to help identify and prevent minors from registering.
- If CT100 discovers that personal data belonging to a minor has been collected inadvertently, we will take immediate action to delete that data and close the associated account.
- Parents or guardians who suspect their child may have registered or used the ct100 platform without authorisation should contact us immediately at [email protected].
Immediate Reporting
Ct100 encourages anyone who knows or suspects that a minor is using the platform to contact us immediately. Protecting the privacy and wellbeing of young people is a shared responsibility, and ct100 takes every such report with the utmost seriousness.
9Amendments to CT100's Privacy Policy
CT100 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements, or improvements to how we handle player information.
Whenever significant changes are made to this Privacy Policy, CT100 will notify players through:
- Notification emails sent to the email address registered to your ct100 account.
- In-platform notifications on CT100 displaying a clear message about changes made when you log in after the amendment's effective date.
- The "Updated" date at the top of this Privacy Policy page indicates when the most recent revision was made.
We encourage you to review this Privacy Policy periodically to stay informed of how CT100 manages your data. Your continued use of the CT100 platform following any amendments to this Privacy Policy coming into effect will be deemed as your acceptance of those changes. If you do not agree with any changes, you have the right to stop using the platform and request the closure of your CT100 account.
10Contact the ct100 Privacy Team
If you have any questions, concerns or complaints regarding this Privacy Policy or how ct100 handles your personal data, we strongly encourage you to reach out to us directly. The ct100 privacy team is here to help:
1
Email the ct100 Support Team
Send a detailed email to [email protected] with the subject line "Privacy Enquiry – [Your Account Name]". We will acknowledge receipt within 24 hours and provide a full response within 14 business days.
2
Live Chat on the ct100 Platform
For more general privacy enquiries, you may use CT100's live chat, available 24/7 in Bahasa Melayu. Our support agents can address basic queries or escalate your matter to the specialist privacy team if needed.
3
Formal Data Rights Request
For formal requests such as data access, deletion, or portability requests, please use email and attach a copy of your identification document for identity verification purposes before we process your request.
CT100 Contact Information
Email: [email protected]
Support Operating Hours: 24 hours a day, 7 days a week
Language: Bahasa Melayu