Malaysia PDPA · Updated 2026

Privacy Policy atom108 — Protecting Your Personal Data in Malaysia

Atom108 is committed to protecting the privacy and personal data of every member in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). This document clearly sets out what we collect, why we collect it, and how we keep it safe.

Atom108's Privacy Commitment to You

Six core principles that underpin how atom108 handles the personal data of every member in Malaysia.

Malaysia PDPA Protection

All atom108 members' personal data is handled in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). You have full rights over your personal information and may request access, correction, or deletion at any time.

256-bit SSL Encryption

Every bit of data transmitted between your device and atom108's servers is protected by 256-bit SSL encryption — the same level of security used by Malaysia's leading banking institutions such as Maybank and CIMB. Your data is never transmitted in an unencrypted state.

No Sale of Data to Third Parties

Atom108 has never sold, rented, or shared your personal data with any advertising company, marketing platform, or third party for commercial purposes. Your data is used solely for account management and the processing of services you have requested.

Full Control in Your Hands

You have full control over your personal data at atom108. Through your account settings, you can update your personal information, manage your marketing communication preferences, request a copy of the data we hold, or apply to have your account permanently deleted.

Secure Data Storage

Your personal data is stored on servers protected by layered access controls, 24/7 security monitoring, and regular backups. atom108's servers undergo independent security audits periodically to ensure data protection standards consistently meet the latest industry requirements.

Data Breach Notification

In the event of any security breach that may affect your personal information, atom108 is committed to notifying you within 72 hours of becoming aware of the breach — well ahead of current legal requirements.

1Introduction & Scope of This Policy

This Privacy Policy describes how atom108 ("we", "platform", "atom108") collects, uses, discloses, stores, and protects your personal information when you access or use our online casino and Sports Betting platform at atom108.click.

This policy applies to all users of the atom108 platform, including visitors browsing the website without registering, prospective members in the process of signing up, registered members using the platform's full range of services, and anyone contacting our customer support team. By using the atom108 platform in any capacity, you agree to the data processing practices set out in this Privacy Policy.

Atom108 operates in full compliance with Personal Data Protection Act 2010 (PDPA) Malaysia. We recognise that privacy is more than a legal obligation — it is the foundation of the trust we build with every member. We will never do anything with your data that you have not consented to, and we are always ready to explain in detail any aspect of how we handle your personal information.

Important Note: This Privacy Policy should be read together with Terms & Conditions atom108 constitutes the entire agreement between you and our platform. In the event of any conflict between the two documents regarding data privacy, this Privacy Policy shall prevail.

2Information We Collect

2.1 Information You Provide Directly

When you register an atom108 account or use our services, you provide us with certain personal information. This includes:

  • Identity information: full name as shown on your MyKad, date of birth, gender, and MyKad number (collected during the KYC identity verification process)
  • Contact information: email address, mobile number, and residential address in Malaysia
  • Account information: chosen username, password (stored in an unreadable hashed format), and account security preferences
  • Financial information: details of the payment methods used (Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks) — we do not store full bank account or card numbers, only the information necessary to process transactions
  • Support information: any information you share when communicating with our customer support team

2.2 Information Collected Automatically

When you use the atom108 platform, our systems automatically collect certain technical information required for the platform to operate securely and efficiently:

  • Technical device information: device type, operating system, web browser version, screen resolution, and language settings
  • Network data: IP address, internet service provider (ISP), and general IP-based location (state or city within Malaysia only — we do not track precise GPS location)
  • Platform usage data: login and logout times, games played, total bets placed, wins and losses, and complete transaction records
  • Cookie data: session information, language preferences, and platform analytics data — see Section 6 for details

2.3 Identity Verification Information (KYC)

As a responsible platform operating in compliance with Malaysian law, atom108 may require additional identity verification documents in certain circumstances — particularly for withdrawals exceeding a specified threshold or where unusual account activity is detected. Documents that may be requested include a copy of your MyKad (front and back), a recent bank statement or utility bill as proof of address, and an e-wallet account statement as proof of payment method ownership. All KYC documents are stored with encryption and are accessible only to authorised personnel.

Data Category Example Information Purpose of Collection
Identity Full name, MyKad number, date of birth Age verification & KYC
Contact Email, phone number Account management & support
Finance MYR deposit & withdrawal records Transaction processing
Technical IP, device, and activity logs Security & fraud detection
Usage Gaming and betting records Platform improvement & compliance

3How We Use Your Data

Atom108 uses collected personal data solely for legitimate purposes necessary to operate our platform. We will never use your data for purposes beyond the scope described below without first obtaining your consent.

3.1 Primary Purposes of Data Use

  • Account management: creating, verifying, and managing your atom108 account, including the registration process, secure login, and identity verification
  • Financial transaction processing: processing your deposits and withdrawal of winnings in MYR via your chosen Malaysian payment method
  • Service delivery: enabling you to access and enjoy all games on the platform — live casino, slots, Sports Betting (Malaysia Super League, EPL, badminton), cricket, lottery, and poker
  • Platform security: detecting and preventing fraud, money laundering, multiple account ownership, and other security threats
  • Customer support: resolving complaints, responding to enquiries, and providing technical support to members
  • Legal compliance: fulfilling legal obligations under Malaysia's PDPA and any other applicable regulations
  • Platform improvements: analysing usage patterns to improve the interface, introduce new games, and enhance the overall user experience

3.2 Marketing Communications

Atom108 may send you marketing communications — including information about the latest promotions, exclusive member bonuses, newly launched games, and seasonal special offers — via email or SMS. These marketing communications are only sent to members who gave their consent at the time of registration or subsequently through their account settings. You may opt out of marketing communications at any time by updating your notification preferences in your account settings or by clicking the "unsubscribe" link in any marketing email.

Even if you opt out of marketing communications, we may still need to send you service-critical emails or SMS messages — such as transaction confirmations, account security alerts, and important notices regarding our terms of service. These communications cannot be unsubscribed from as they form an essential part of your account service.

4Data Sharing with Third Parties

Atom108 does not sell, rent, or trade your personal data to any third party for their commercial purposes. This is an absolute commitment we have never compromised on and never will. However, for legitimate platform operational purposes, we may share certain data with a limited and controlled set of third-party categories:

4.1 Payment Service Providers

To process your deposits and withdrawals in MYR, atom108 is required to share the necessary information with your chosen payment service provider — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, or CIMB Clicks. Such data sharing is limited strictly to what is needed for transaction processing purposes and is subject to each provider's respective privacy policy.

4.2 Game Providers

The atom108 platform integrates games from third-party software providers that supply slots, live casino, and other games. These providers may receive the technical data necessary solely for game processing purposes — such as game session IDs and bet amounts. They do not receive your personal identifying information such as your name, MyKad number, or financial details.

4.3 Legal Authorities

Atom108 will disclose personal data to Malaysian authorities — including the police, Bank Negara Malaysia, or the courts — when required to do so by law or a valid court order. We are unable to refuse lawful disclosure requests from authorities. In such situations, we will notify you of the disclosure unless prohibited from doing so by law or court order.

Important Notice: Beyond the categories listed above, atom108 does not share your personal data with any other party. If you receive any communication claiming to be from a party affiliated with atom108 that requests your personal or financial information, please disregard it and report it to us at support@atom108.click — this may be a phishing attempt.

5Data Retention Period

Atom108 retains your personal data only for as long as necessary for the purposes outlined in this Privacy Policy, or as required by applicable Malaysian law. The following are general guidelines for our data retention periods:

  • Active account data: retained for the duration your account is active, plus the minimum post-closure retention period
  • Financial transaction records: retained for seven (7) years from the transaction date in accordance with Malaysian accounting and tax legislation
  • KYC documents: retained for five (5) years following account closure in accordance with anti-money laundering legal requirements
  • Security and activity logs: retained for twelve (12) months for security investigation and fraud detection purposes
  • Customer support data: retained for three (3) years after the last interaction for dispute resolution purposes
  • Marketing data: retained until you withdraw consent or request deletion

Once the retention period expires, atom108 will delete or anonymise your personal data in a secure and irreversible manner. Data required for legal compliance purposes will be kept in an isolated format and accessible only for those purposes.

6Cookie Policy

The atom108 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how our platform is used. Cookies are small text files stored on your device when you visit our website.

6.1 Types of Cookies We Use

The following are the categories of cookies used on the atom108 platform:

Essential Cookies Analytics Cookies Functional Cookies Marketing Cookies
  • Essential Cookies (Session): These cookies are required for the platform to function properly. They manage your login session, maintain content in your cart or forms, and protect the platform against CSRF attacks. These cookies cannot be disabled as they are critical to the platform's security and core functionality.
  • Analytics Cookies: Helping us understand how users interact with the platform — which pages are most popular, where users encounter difficulties, and how we can improve the overall user experience. This data is collected in aggregate form and does not personally identify you.
  • Functional Cookies: Saving your preferences such as language, display settings, and frequently accessed game selections. This allows the platform to deliver a more personalised experience for you.
  • Marketing Cookies: Used to display atom108 promotions and offers relevant to your interests. You may decline these cookies without affecting the core functionality of the platform.

You can manage your cookie preferences through your web browser settings at any time. Please note that disabling essential cookies may affect your ability to log in or use certain features of the platform.

7Your Rights Under Malaysia's PDPA

As an atom108 member and as a Malaysian citizen or resident, you have certain rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). atom108 fully respects and supports the exercise of these rights.

Right to Access Data

You have the right to request and receive a copy of all personal data that atom108 holds about you. We will provide this information in a readable format within 21 calendar days of receiving your request. Your first request is free of charge; subsequent requests within the same 12-month period may be subject to a reasonable administrative fee.

Right to Rectification

If you find that the personal data we hold about you is inaccurate, incomplete, or out of date, you have the right to request a correction. You can update much of your information directly through your account settings, or contact our support team for corrections that require additional verification, such as your name or date of birth.

Right to Erasure (Right to Be Forgotten)

Under certain circumstances, you have the right to request that atom108 delete your personal data. Such requests will be processed in accordance with legal requirements — meaning data that must be retained for PDPA compliance, tax law, or anti-money laundering obligations cannot be deleted even upon request. All other data not subject to statutory retention requirements will be deleted within 30 days.

Right to Object to Processing

You have the right to opt out of the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of our legitimate interests, though doing so may affect our ability to provide you with the full range of services.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format for the purpose of transferring it to another platform. atom108 will provide your data in JSON or CSV format upon request.

To exercise any of the rights above, please contact the atom108 Data Privacy Officer by email at support@atom108.click with the subject line "PDPA Rights Request" along with your full name and account number. We will verify your identity before processing any request and will inform you of the outcome within the timeframe stipulated by law.

8Technical & Organisational Security Measures

Atom108 takes the security of your personal data seriously, investing heavily in infrastructure designed to protect against unauthorised access, disclosure, alteration, and destruction. The security measures we have put in place cover both technical and organisational aspects:

8.1 Technical Security Measures

  • Data encryption in transit: all communications between your device and atom108's servers are encrypted using TLS 1.3 with a 256-bit SSL certificate
  • Encryption of data at rest: sensitive data such as passwords (stored as bcrypt hashes), MyKad numbers, and financial information is encrypted when stored in our database
  • Two-factor authentication (2FA): an additional security layer for member accounts that protects against unauthorised access even if a password is compromised
  • Intrusion detection system (IDS): real-time network traffic monitoring to detect and block unauthorised access attempts
  • Regular security audits: independent security assessments conducted on a regular basis to identify and address system vulnerabilities
  • Data backups: automated multi-location data backups to ensure recovery in the event of a system failure

8.2 Organisational Security Measures

  • Role-based access control (RBAC) — atom108 staff may only access the data required to perform their specific job responsibilities
  • Mandatory privacy and security awareness training for all staff who handle members' personal data
  • Non-disclosure agreements (NDAs) binding all staff and contractors from disclosing member data
  • Documented security incident response procedures that are regularly tested

While atom108 takes all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. You also play an important role in keeping your account secure — use a strong, unique password, enable 2FA, and never share your login credentials with anyone.

9Cross-Border Data Transfers

Atom108 operates primarily in Malaysia and processes members' personal data within Malaysian borders. In certain limited situations, data may be processed by technical service providers operating outside Malaysia — for example, cloud service providers or international game software providers.

When cross-border data transfers occur, atom108 ensures that:

  • Data recipients outside Malaysia provide a level of data protection equivalent to or higher than that required under Malaysia's PDPA
  • Legally binding data processing agreements (DPA) are signed with all third-party data recipients
  • Data transfers are limited to the minimum information required for specific technical purposes
  • Sensitive personal data — particularly KYC documents and financial information — is not transferred outside Malaysia unless required by law

10Policy Amendments & How to Contact Us

Atom108 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our operational practices, new legal requirements, or changes in the technology we use. When material amendments are made, we will:

  • Updating the "Last Updated" date at the top of this page
  • Publishing a clear notice on the atom108 platform for at least 30 days after the amendments are posted
  • Sending email notifications to all registered members where amendments are material and significant

We encourage you to review this page periodically. Continued use of the atom108 platform after any amendments are published will be considered acceptance of the updated policy.

10.1 Contact atom108's Data Privacy Officer

For any enquiries, complaints, or requests relating to this Privacy Policy or the processing of your personal data, please contact us:

Privacy Officer Email

Support@atom108.click
Subject: "PDPA Privacy Request"
Response time: within 1–3 business days

24/7 Live Chat

For immediate privacy enquiries, use the Live Chat feature within the atom108 platform. Available 24 hours a day, 7 days a week in Bahasa Melayu.

Effective Date: This Privacy Policy takes effect on 1 January 2026 and supersedes all previous versions. atom108 is committed to managing your personal data with full integrity, transparency, and accountability.

Your Rights Under the PDPA
Related Documents
Security Protection
256-bit SSL Encryption
2FA Verification
Data Encrypted at Rest
Malaysia PDPA Compliance
No Sale of Personal Data
Contact Privacy Officer

support@atom108.click

24/7 Live Chat

Email subject: "PDPA Privacy Request"

Your Privacy Is Protected — Join atom108 with Confidence

Atom108 is built on a foundation of trust. Your personal data is protected with the latest security technology and managed in accordance with Malaysia's PDPA. Register for free today and enjoy over 500 games in a safe, fair, and responsible environment.

18+ only · Data protected under PDPA · Transactions in MYR · No hidden charges

Bahasa Melayu