Skip to main content

Trust & Security

Results you can verify.
Judging you can audit.

PENTAS is competition infrastructure built and operated by Digit360 Sdn Bhd, Malaysia. Every certificate is publicly verifiable, every score is recorded, and key competition actions remain traceable.

Operated by a registered Malaysian company · SSM 1477803X / 202201032106

Our commitments

Four commitments we can prove

Anyone on the platform — organiser, jury, participant, or member of the public — can see the evidence behind each one.

Verifiable certificates

Every certificate carries a unique number that anyone can check on the public verification page — no account required.

Judging with integrity

Juries declare conflicts of interest before they judge. Scoring follows locked rubrics, and conflicted scores are excluded from results.

Data handled with care

Personal data is collected only to run competitions, handled under Malaysia's PDPA, and never sold. Access is scoped by role, not open to everyone.

An accountable operator

PENTAS is built and operated by Digit360 Sdn Bhd, a registered Malaysian company you can reach by email or phone.

Judging integrity

How judging stays fair

Why this matters

Judging disputes are the most common way competitions lose trust. Scores collected in spreadsheets and messaging apps cannot be audited once the event is over.

PENTAS records the entire evaluation on the platform, so results can be explained long after the event ends.

1

Jury onboarding

Organisers invite jury members and manage assignments for each competition.

2

Conflict declaration

Before judging opens, juries declare any relationship with a team — institution, department, or supervision.

3

Conflict review

Organisers review every declaration. A confirmed conflict stops that jury from scoring the affected team.

4

Rubric locked

Every score stores a snapshot of the rubric and version used, so criteria cannot quietly shift mid-competition.

5

Scores recorded

Juries score inside the competition's judging window, and every submission is stored with its author and time.

6

Revisions on the record

Scores can be revised until judging closes. Earlier versions stay on record — each revision is linked to the score it replaced and logged.

7

Results from records

Final results are computed from recorded, non-conflicted scores, and sensitive admin actions are recorded in an audit log.

Public verification

Anyone can verify a certificate

No login and no special access. If a certificate was issued through PENTAS, its authenticity can be checked in seconds.

1

Find the certificate number

It is printed on the certificate and encoded in its QR code.

2

Enter it on the verification page

Type the number, or scan the QR code with a phone camera.

3

See the authenticated record

The holder, competition, issuer, and issue date appear only when the number matches a genuine certificate.

For privacy, public verification shows only the details needed to confirm authenticity. Certificate holders can sign in to see more.

Platform security

Security controls currently in operation

The controls below describe protections currently implemented across PENTAS. Security practices are reviewed as the platform evolves.

Security information last reviewed: September 2026

Role-scoped access

Admins, juries, participants, and institutions each work in their own portal, and every role sees only what it needs.

Encrypted connections

All traffic to PENTAS travels over encrypted connections, and sign-in sessions use signed tokens.

Abuse and bot protection

Public endpoints are rate-limited, and bot checks guard registration and other public forms.

Audit logging

Sensitive admin actions — approvals, payments, role changes, deletions — are recorded in an audit log.

Automated backups

The database is backed up on a schedule, with restore tooling that is verified against the live schema.

Data minimisation

We collect what competitions need to run, and you can request access, correction, or deletion of your data.

Found a security issue?

If you believe you have discovered a security vulnerability affecting PENTAS, please report it responsibly. We investigate every report we receive.

Email Our Security Team

Questions

Frequently asked questions

Confidence, from registration to certificate.

Run your next competition on infrastructure that can show its work.

Privacy PolicyTerms of Service