Verifiable certificates
Every certificate carries a unique number that anyone can check on the public verification page — no account required.
Trust & Security
PENTAS is competition infrastructure built and operated by Digit360 Sdn Bhd, Malaysia. Every certificate is publicly verifiable, every score is recorded, and key competition actions remain traceable.
Operated by a registered Malaysian company · SSM 1477803X / 202201032106
Our commitments
Anyone on the platform — organiser, jury, participant, or member of the public — can see the evidence behind each one.
Every certificate carries a unique number that anyone can check on the public verification page — no account required.
Juries declare conflicts of interest before they judge. Scoring follows locked rubrics, and conflicted scores are excluded from results.
Personal data is collected only to run competitions, handled under Malaysia's PDPA, and never sold. Access is scoped by role, not open to everyone.
PENTAS is built and operated by Digit360 Sdn Bhd, a registered Malaysian company you can reach by email or phone.
Judging integrity
Judging disputes are the most common way competitions lose trust. Scores collected in spreadsheets and messaging apps cannot be audited once the event is over.
PENTAS records the entire evaluation on the platform, so results can be explained long after the event ends.
Organisers invite jury members and manage assignments for each competition.
Before judging opens, juries declare any relationship with a team — institution, department, or supervision.
Organisers review every declaration. A confirmed conflict stops that jury from scoring the affected team.
Every score stores a snapshot of the rubric and version used, so criteria cannot quietly shift mid-competition.
Juries score inside the competition's judging window, and every submission is stored with its author and time.
Scores can be revised until judging closes. Earlier versions stay on record — each revision is linked to the score it replaced and logged.
Final results are computed from recorded, non-conflicted scores, and sensitive admin actions are recorded in an audit log.
Public verification
No login and no special access. If a certificate was issued through PENTAS, its authenticity can be checked in seconds.
It is printed on the certificate and encoded in its QR code.
Type the number, or scan the QR code with a phone camera.
The holder, competition, issuer, and issue date appear only when the number matches a genuine certificate.
For privacy, public verification shows only the details needed to confirm authenticity. Certificate holders can sign in to see more.
Platform security
The controls below describe protections currently implemented across PENTAS. Security practices are reviewed as the platform evolves.
Security information last reviewed: September 2026
Admins, juries, participants, and institutions each work in their own portal, and every role sees only what it needs.
All traffic to PENTAS travels over encrypted connections, and sign-in sessions use signed tokens.
Public endpoints are rate-limited, and bot checks guard registration and other public forms.
Sensitive admin actions — approvals, payments, role changes, deletions — are recorded in an audit log.
The database is backed up on a schedule, with restore tooling that is verified against the live schema.
We collect what competitions need to run, and you can request access, correction, or deletion of your data.
If you believe you have discovered a security vulnerability affecting PENTAS, please report it responsibly. We investigate every report we receive.
Questions
Run your next competition on infrastructure that can show its work.