Soto88 Privacy Policy – Your Personal Data Protection

1Introduction

Soto88 ("We", "Platform") respects the privacy of every individual who uses our services and is committed to protecting the personal data entrusted to us. This Privacy Policy transparently explains how we collect, use, disclose, and protect your personal information when you access or use the soto88 platform — whether through our website or mobile app.

By registering an account or using the soto88 platform, you acknowledge that you have read and understood this Privacy Policy. This document should be read together with the Terms and Conditions us, which forms the entire agreement between you and soto88.

We comply with applicable data protection laws and continually strive to ensure our data management practices are fair, transparent, and accountable. If you have any questions about this Privacy Policy, our support team is available to assist at any time.

2Personal Data We Collect

We collect various types of personal data depending on how you interact with the soto88 platform. The following are the main categories of data we collect:

2.1 Data You Provide Directly

• Full name, date of birth, and gender
• Email address and mobile number
• Current residential address
• National identity card number (MyKad) or passport for the KYC process
• Bank account or e-wallet details for deposit and withdrawal transactions
• Photo or scan of identity verification documents

2.2 Data Collected Automatically

• IP address and general geolocation information
• Device type, operating system, and browser version
• Login session times and durations
• Pages visited and navigation patterns within the platform
• Betting log data and transaction records
• Cookie information and device identifiers

2.3 Data from Third Parties

• Identity verification information from approved KYC service providers
• Fraud prevention data from third-party security providers
• Referral information from affiliate programmes (where applicable)

3How We Use Your Data

The personal data we collect is used solely for legitimate and necessary purposes to effectively operate the soto88 platform. We do not use your data beyond the scope stated here.

• Account Management: Creating, verifying, and managing your member account, including the required KYC process.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions on the platform securely and accurately.
• Platform Security: Detecting and preventing fraud, money laundering, account abuse, and suspicious activity.
• Customer Support: Responding to enquiries, resolving complaints, and providing the necessary technical assistance.
• Legal Compliance: Fulfilling legal obligations, regulatory reporting, and cooperation with relevant authorities.
• Service Improvement: Analysing usage patterns to improve platform features, user interface, and overall service quality.
• Marketing Communications: Sending promotional information, bonus offers, and platform updates — only if you have consented to receive such communications.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support.

Every data processing activity we carry out has a clear legal basis — whether grounded in your consent, contractual necessity, legal obligation, or the company's legitimate interests that do not override your fundamental rights.

4Data Sharing & Disclosure

Soto88 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, we may share your data in the following limited circumstances:

4.1 Third-Party Service Providers

We work with trusted service providers to operate the platform, including payment processors, KYC providers, cloud infrastructure providers, and analytics services. All third parties are bound by strict data protection agreements and are only permitted to process your data in accordance with our instructions.

4.2 Legal Requirements

We may disclose your data to government authorities, regulatory bodies, or law enforcement agencies when required to do so by law, court order, or valid legal process. In such situations, we will endeavour to notify you to the extent permitted by law.

4.3 Protection of Interests

We may share data if we believe disclosure is necessary to protect the rights, property, or safety of soto88, our members, or the public — including in cases of suspected fraud, security threats, or illegal activity.

4.4 Business Restructuring

If soto88 is involved in a merger, acquisition, or asset sale, your personal data may be transferred as part of that transaction. You will be notified in advance, and this Privacy Policy will continue to apply.

5Data Security

Protecting your personal data is soto88's top priority. We implement comprehensive technical and organisational security measures to keep your data safe at all times:

• 128-bit SSL Encryption: All data transmitted through the platform is protected with high-level encryption.
• Data-at-Rest Encryption: Sensitive data stored in our databases is also encrypted using AES-256 standards.
• Strict Access Controls: Only authorised personnel may access personal data, based on the principle of least privilege.
• 24/7 Monitoring: Our systems are continuously monitored to detect and respond to any security threats.
• Regular Security Testing: We conduct regular penetration testing and security audits to identify and address system vulnerabilities.
• Two-Factor Authentication: soto88 internal systems use two-factor authentication (2FA) for all staff access to sensitive data.
• Data Backup: Your data is automatically backed up to secure, geographically separate locations to ensure service continuity.

While we take all reasonable precautions, no system can guarantee absolute security. You also play an important role in keeping your account safe by using a strong password and not sharing your login credentials.

6Cookie Policy

Soto88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Necessary Cookies (Required): Required for basic platform functionality such as login, session security, and language preferences. These cookies cannot be disabled.
• Functional Cookies: Helping us remember your preferences, such as display settings and game preferences, for a more personalised experience.
• Analytics Cookies: Helping us understand how users interact with the platform so we can improve our services. This data is collected in aggregate and does not personally identify you.
• Marketing Cookies: Used to display relevant advertisements. These cookies are only activated with your explicit consent.

You may manage or block cookies at any time through your browser settings. Please note that blocking certain cookies may affect the functionality of some platform features.

7Your Rights Regarding Personal Data

Soto88 recognises and respects your rights over your personal data. You may exercise any of the following rights by contacting our support team:

• Right of Access: You have the right to obtain a copy of all personal data we hold about you, along with information on how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate, incomplete, or outdated data in our records.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may request that we delete your personal data, subject to applicable legal retention obligations.
• Right to Restrict Processing: You may request that we restrict the processing of your data under certain circumstances, such as during a dispute regarding data accuracy.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format and to transfer it to another service provider.
• Right to Object: You may object to the processing of your data for direct marketing purposes or on the basis of legitimate interest at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the validity of prior processing.

We will process your request within 30 business days. In complex cases, this period may be extended to 60 days with prior notice to you.

8Data Retention Period

Soto88 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal requirements. The following are our data retention guidelines:

• Active Account Data: Retained for as long as your account remains active on the soto88 platform.
• Transaction & Financial Data: Retained for a minimum of 7 years from the transaction date in accordance with accounting and anti-money laundering legal requirements.
• KYC Documents: Retained for 5 years after account closure or after the date of the last transaction, whichever is later.
• Communication Logs: Customer support records are retained for 3 years for dispute resolution purposes.
• Analytics Data: Anonymised usage data is retained for up to 24 months for service improvement purposes.

Once the retention period expires, your data will be securely deleted or permanently anonymised so that it can no longer be associated with you.

9International Data Transfer

As an online platform, soto88 may process or store your personal data on servers located outside Malaysia. In such situations, we ensure that all international data transfers are carried out with adequate safeguards, including:

• Use of approved standard contractual clauses for data transfers to suppliers in foreign countries.
• Selection of partners and suppliers who comply with equivalent or higher international data protection standards.
• Periodic data protection assessments to ensure ongoing compliance.

You may contact our support team for more information about the safeguard mechanisms we use for international data transfers.

10Minors & Young Individuals

The soto88 platform is not intended for individuals under the age of 21. We do not knowingly collect personal data from children or minors below that age limit.

If you believe we have inadvertently collected personal data from a minor, please contact us immediately. We will take prompt steps to delete that data from our systems.

Parents and guardians concerned about their children's use of the platform may contact our support team for further guidance.

11Amendments to This Privacy Policy

Soto88 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or technological developments. When we make significant changes, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying a clear notice on the soto88 platform for a minimum of 14 days.
• Sending email notifications to all registered members for material changes.

Continued use of the soto88 platform after any amendments take effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to close your account before those changes come into effect.

12Contact Us

If you have any questions, concerns, or wish to exercise your privacy rights, please contact our Data Protection Officer through the following channels:

• Support Email: [email protected]
• LiveChat: Available 24/7 via the soto88 platform
• FAQ: Visit page FAQ us for answers to frequently asked questions

We are committed to responding to all privacy-related enquiries within 5 business days. For more complex requests, we will inform you of the expected timeframe.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your country.