Hot123 takes your privacy seriously. This Privacy Policy clearly explains how we collect, use, store, and protect your personal data — all in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010). Read on to understand your rights as a hot123 member.
Privacy is not a slogan at hot123 — it is a core value reflected in every system and process we have built to protect members' personal data.
All data transmitted to and from the hot123 platform is encrypted using 256-bit SSL in transit. Data stored on our servers is protected with AES-256 — the same encryption standard used by Malaysia's leading banks such as Maybank and CIMB. Your data remains unreadable to anyone, whether in transit or at rest.
Hot123 fully complies with the Malaysia Personal Data Protection Act 2010 (PDPA 2010) in all aspects of member personal data processing. This means we have a legal obligation — not merely an option — to ensure your data is processed lawfully, used only for stated purposes, and protected against any form of misuse.
Hot123 has never and will never sell, rent or share your personal data with advertisers, marketing companies or third-party data brokers. Your data is used solely to manage your account and services at hot123 — not to generate profit by selling your personal information to others.
Hot123 member data is stored on servers protected by multiple layers of access controls. Only specifically authorised personnel — and only for the purposes of their role — are permitted to access members' personal data. All access is logged and audited regularly to detect any suspicious activity.
As a hot123 member, you have the full right to access the personal data we hold about you, request corrections if any information is inaccurate, and request deletion of your data upon account closure. hot123 will process each such request within the timeframe stipulated by PDPA 2010.
You can choose to receive or opt out of any marketing communications from hot123 at any time — either through your account settings or by contacting our support team. Unsubscribing from promotional emails will not affect important account-related communications such as transaction and security notifications.
When you register an account with hot123, you are entrusting us with fairly sensitive information — your full name, phone number, bank account or eWallet details, and in some cases, a copy of your identification document. hot123 does not take that trust lightly. This Privacy Policy explains clearly and precisely what happens to that information from the moment you submit it to us.
Hot123 operates within the Malaysian legal framework, and the Personal Data Protection Act 2010 (PDPA 2010) governs how platforms like ours may handle users' personal data. Compliance with PDPA 2010 is not merely a legal obligation for us — it is the foundation of trust that underpins the long-term relationship between hot123 and our more than 350,000 members across Malaysia.
This Privacy Policy applies to all information you provide to hot123 through the website, mobile platform or any other communication channel. It also covers data we collect automatically while you use our platform, such as usage data and technical information about your device.
Note: By continuing to use the hot123 platform after the effective date of this updated Privacy Policy, you are deemed to have read and agreed to the revised terms. If you have any questions, please contact us at support@hot123.best before continuing to use the platform.
Hot123 only collects personal data that is strictly necessary to provide our services safely and efficiently. We do not collect data in excess of what is needed, and every category of data collected has a clear and legitimate purpose.
In certain cases — particularly for withdrawals exceeding specified limits or where AML compliance requirements apply — hot123 may request a copy of identity documents such as your MyKad, passport or latest bank statement. These documents are processed through a secure system and retained only for as long as necessary for verification and legal compliance purposes.
Hot123 only processes your personal data for legitimate and specific purposes. We will not use your data for any other purpose without first obtaining your additional consent. Below is a summary table of data processing purposes at hot123.
| Purpose of Processing | Data Used | Legal Basis |
|---|---|---|
| Member account management | Name, email address, phone number | Contract fulfilment |
| Deposit & withdrawal processing | Bank account / eWallet information | Contract fulfilment |
| Identity verification (KYC/AML) | Identity documents | Legal obligation |
| Account security & fraud | IP address, session data, login history | Legitimate interests |
| Customer support | Account information, transaction history | Contract fulfilment |
| Responsible gaming | Game history, betting patterns | Legitimate interests & legal obligations |
| Promotional communications (with consent) | Name, email address, phone number | Your consent |
| Platform improvements | Anonymised usage data | Legitimate interests |
Marketing Consent: hot123 will only send you marketing communications if you have given explicit consent during registration or through your account settings at a later stage. You may withdraw this consent at any time with no effect on your services.
Hot123 stores all members' personal data on servers located in the Asia region — ensuring better performance for Malaysian users and easier compliance with the regional legal framework. Our servers operate within industry-grade data centre facilities with comprehensive physical and digital protection.
Hot123 retains members' personal data for as long as the account is active and for a defined period after account closure to meet legal obligations. Financial transaction records are retained for a minimum of 7 years as required by Malaysian financial laws. Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered.
Incident Response: In the event of a data security incident affecting members' personal data, hot123 is committed to notifying affected members and the relevant authorities within the timeframe stipulated by PDPA 2010 — as promptly as possible and no later than 72 hours after the incident is detected.
Hot123 upholds a strict policy on sharing data with third parties. As a general rule, we do not share, sell, or disclose members' personal data to any third party, except in the following limited and specific circumstances.
All third parties with whom hot123 shares data are required to uphold data protection standards equivalent to or higher than those we adhere to ourselves. Written data processing agreements are in place for every third-party data sharing relationship.
Under PDPA 2010, as a hot123 member you hold certain rights in relation to your personal data. hot123 fully respects and facilitates the exercise of these rights. Below are your rights and how to exercise them.
You have the right to request a copy of the personal data we hold about you at any time. hot123 will provide a response within 21 days of the request date. Submit your data access request to support@hot123.best with the subject line "Data Access Request".
If you find that any personal data we hold about you is inaccurate or out of date, you have the right to request a correction. You can update much of your profile information directly from your account panel, or contact support for details that require additional verification.
When you close your hot123 account, you may request deletion of your personal data. hot123 will honour this request subject to the record retention obligations prescribed by Malaysian law — financial transaction records must be retained for a minimum of 7 years. Data not subject to such obligations will be deleted within 30 days.
You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests in certain circumstances. All objections will be reviewed and responded to within 14 days.
You have the right to receive the personal data you have provided to hot123 in a machine-readable format (such as CSV or JSON), for your own use or for transfer to another platform. Such requests will be processed within 30 days.
If the processing of your data is based on consent you have provided (e.g. marketing communications), you may withdraw that consent at any time through your account settings or by contacting support. Withdrawing consent does not affect the validity of any processing that took place prior to the withdrawal.
Hot123 uses cookies and similar tracking technologies to enhance the user experience, ensure account security, and understand how our platform is used. This section explains exactly what types of cookies we use and how you can manage them.
You can control or delete cookies through your web browser settings at any time. Most modern browsers allow you to view stored cookies, delete them individually or all at once, and block the browser from accepting new cookies. Please note, however, that disabling essential cookies may affect certain functions of the hot123 platform, including the ability to remain logged in during your gaming session.
Malaysia's Personal Data Protection Act 2010 (PDPA 2010) is the primary legislation governing personal data protection in Malaysia. hot123 fully complies with the seven fundamental principles set out in PDPA 2010, and this compliance is a core obligation underpinning all of our data management practices.
In addition to PDPA 2010, hot123 also complies with the requirements of the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA) as they relate to data collection and processing for KYC and AML purposes. Compliance with these laws is an obligation we take very seriously in the interest of the overall integrity of Malaysia's financial ecosystem.
Hot123 appoints an internal data protection representative who is responsible for ensuring PDPA 2010 compliance and handling all privacy-related enquiries, requests and complaints from members. If you have any concerns about how hot123 handles your personal data, we encourage you to contact us first and give us the opportunity to address the matter directly.
If you are unsatisfied with how hot123 has handled your privacy complaint after we have had a reasonable opportunity to address it, you have the right to escalate the matter to Malaysia's Personal Data Protection Department (JPDP) under the Ministry of Communications and Digital Malaysia. Information about JPDP and its complaints procedure is available on the official website of the Ministry of Communications and Digital Malaysia.
Privacy Policy Amendment: hot123 will notify you of any material changes to this Privacy Policy via email and in-platform notifications at least 14 days before the changes take effect. The latest version of the Privacy Policy is always available on this page, with the update date clearly displayed at the top.
Data security at hot123 is not an empty promise — it is backed by technology, processes and verifiable compliance with industry standards.
Data encryption in transit for all platform communications
Data encryption at rest on hot123 servers
Full compliance with the Malaysia Personal Data Protection Act
Identity verification and anti-money laundering procedures
Minimum data collection principle — only what is strictly necessary
Independent security audits are conducted periodically across all systems
Many online casino players in Malaysia are unaware of just how much personal information they share with the platforms they use — and more importantly, what happens to that information. At hot123, we believe that transparency about our privacy practices is an integral part of the trust you place in us as your platform of choice.
When you register and use hot123, you interact with an ecosystem that involves several entities — hot123 as the platform operator, game providers such as PG Soft and Evolution Gaming, payment providers such as Touch 'n Go and GrabPay, and other supporting technology systems. The hot123 Privacy Policy ensures that interactions with each of these entities take place within a framework that safeguards your privacy interests.
One of the key things that sets hot123 apart from many other online casino platforms operating in Malaysia is our commitment to verifiable privacy transparency. This goes beyond claims written in a policy document — we implement the technical systems and operational procedures that back up that commitment. For example, your password is never stored in plain text on our servers. Our system uses the bcrypt hashing algorithm, which means that even in the event of unauthorised server access, an attacker would not be able to retrieve your actual password.
In addition, hot123 operates on a "need-to-know" basis for internal access to member data. This means a customer support agent assisting you with a game-related query will not have access to your bank account information. Each category of data is accessible only to staff with a clear and legitimate operational need to do so, and all access is recorded in audit logs that are monitored on a regular basis.
There is one aspect of data use that may not immediately come to mind: hot123 uses your game history data — responsibly and in the appropriate context — to support responsible gaming. This means our systems can identify gameplay patterns that may indicate a problem, allowing us to take proactive steps such as sending care notifications to members who may need assistance.
The use of data for responsible gaming purposes is one of the few instances where data processing may occur without your explicit consent — this is based on our legitimate interests and our industry obligation to safeguard member wellbeing. We are committed, however, to doing so in a manner that minimises any impact on your other privacy rights, and information used for this purpose will not be disclosed to any party except in clear legal or emergency contexts.
While hot123 does everything we can on our end to protect your data, there are steps you can take yourself to further strengthen your account security and privacy. Use a strong, unique password for your hot123 account — do not reuse the same password for your email, online banking, or other accounts. Enable two-factor authentication (2FA) where available, as this adds a significant extra layer of security even if your password is ever compromised.
Also be vigilant against phishing attempts — hot123 will never ask for your password, PIN, or sensitive information via email or WhatsApp/Telegram messages. If you receive any communication that appears to be from hot123 but requests such information, contact our support team immediately to verify its authenticity before taking any action. This is especially important given the rising number of online scams in Malaysia impersonating casino platforms.
hot123's Privacy Commitment: We regard your privacy as a fundamental right, not an option. Every decision we make about your data is measured against one question: "Does this protect our members?" If the answer is no, we do not do it. Your trust is hot123's most important asset.
This Privacy Policy forms part of hot123's overall legal and policy framework. Please read these documents together for a complete understanding.
The hot123 team is ready to assist you with any questions, requests or concerns regarding your privacy and data protection.
Answers to the most frequently asked questions by hot123 members about privacy and data protection.
Hot123 fully complies with the Malaysia Personal Data Protection Act 2010. You have the right to access, correct, delete, and object to the processing of your personal data. For any queries or requests relating to your PDPA rights, contact us at support@hot123.best. If you are not satisfied with our response, you may lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia. See also Terms & Conditions us for a more complete overview.