Privacy Policy

This Privacy Policy ("Policy") is issued by Sohotogel ("the Company", "we", "us", "our") and applies to all personal data collected, processed, stored, and shared by Sohotogel in connection with the operation of the sohotogel.cam platform and all associated services ("the Platform").

This Policy applies to all individuals who access or use the Platform, including registered players, visitors browsing the website without an account, and any individual who contacts Sohotogel through our live chat or email support channels.

Sohotogel is committed to processing personal data responsibly, transparently, and in compliance with applicable data protection principles. We encourage you to read this Policy carefully so that you understand how your information is handled and what rights you have.

By registering an account on the Platform or continuing to use Sohotogel's services, you confirm that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms & Conditions.

For the purposes of this Privacy Policy, the following definitions shall apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial account information, and online identifiers such as IP addresses.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction, whether performed automatically or manually.
• "Data Controller" means Sohotogel, being the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of Sohotogel, pursuant to a documented instruction and data processing agreement.
• "Player" or "User" means any individual who has registered an account with Sohotogel or who accesses the Platform in any capacity.
• "KYC" means Know Your Customer — the identity verification process through which Sohotogel confirms a player's identity, age, and legitimacy prior to processing withdrawals.
• "Cookies" means small data files stored on a user's device by their web browser at the request of the Platform, used to retain session information, preferences, and analytical data.

Sohotogel collects the following categories of personal data from players and users of the Platform:

Sohotogel collects personal data through the following channels and mechanisms:

• Direct Provision by You: Information you actively submit when registering an account, completing the KYC verification process, initiating a deposit or withdrawal, contacting our support team, or responding to a survey or promotional offer.
• Automated Technical Collection: Technical and usage data collected automatically when you access or interact with the Platform, including through cookies, web server logs, and similar tracking technologies. This data is collected regardless of whether you are logged in to an account.
• Third-Party Payment Processors: Transaction confirmation and reference data received from payment providers when you deposit or withdraw funds using Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, or other supported Malaysian payment channels.
• Identity Verification Services: Where Sohotogel uses a third-party KYC verification service, that provider may share the outcome of the identity check and relevant verification data with us as part of the compliance process.
• Publicly Available Sources: In limited circumstances, Sohotogel may supplement account data with information obtained from publicly accessible sources for the purpose of fraud prevention or regulatory compliance.

Sohotogel processes your personal data only where a lawful basis exists for doing so. The primary purposes for which we process personal data and the corresponding legal bases are as follows:

Where we rely on your consent as the legal basis for processing — in particular for sending you promotional communications about Sohotogel offers — you may withdraw that consent at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

Sohotogel does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share personal data only in the following limited and controlled circumstances:

• Payment Processors: We share necessary transaction data with the payment service providers that facilitate your deposits and withdrawals, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow operators, and FPX-participating banks such as Maybank, CIMB, Public Bank, and Hong Leong Bank. These providers process data only as required to complete your transactions.
• KYC and Identity Verification Providers: Where we engage third-party services to assist with identity and age verification, the minimum personal data necessary for that verification process will be shared with those providers under a data processing agreement.
• Regulatory and Licensing Authorities: We may be required to disclose player data to our licensing authority, regulatory bodies, or law enforcement agencies where required by law, court order, or other legal process. Such disclosures are made only to the extent required and in accordance with applicable legal obligations.
• Fraud Prevention and Security Services: Sohotogel may share data with specialist fraud prevention or cybersecurity providers where necessary to protect the platform and its players from fraudulent activity.
• Professional Advisers: We may share data on a confidential basis with our legal advisers, auditors, or insurers where necessary for legitimate business purposes.

Sohotogel uses cookies and similar tracking technologies to operate the Platform, maintain your session when you are logged in, remember your preferences, and gather aggregate analytical data about how players use the site.

We use the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They manage your login session, maintain security tokens, and enable core functionality such as the cashier and game loading. These cannot be disabled without impairing your use of the Platform.
• Functional Cookies: These cookies remember your preferences such as language settings and game display options. They are not strictly necessary but improve the quality and personalisation of your experience on Sohotogel.
• Analytical Cookies: We use anonymised analytical data to understand how players navigate the Platform, which pages and games are most popular, and where technical issues may arise. This data is aggregated and does not identify individual users.
• Session Cookies: Temporary cookies that exist only for the duration of your browser session and are automatically deleted when you close your browser.

You can control or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and performance of the Sohotogel platform.

Sohotogel retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law and our licensing obligations. The following general retention guidelines apply:

• Account and Identity Data: Retained for the duration of your active account and for a minimum of five (5) years following the closure of your account, in compliance with anti-money laundering and gaming licensing requirements.
• Transaction and Financial Records: Deposit, withdrawal, and betting transaction records are retained for a minimum of five (5) years from the date of the transaction, as required for financial and regulatory compliance.
• KYC Documents: Identity verification documents are retained for the minimum period required by our licensing authority, typically five (5) years from account closure.
• Communication Records: Live chat transcripts and email correspondence are retained for a period of two (2) years from the date of communication, unless a longer period is required in connection with an ongoing dispute or investigation.
• Technical and Analytical Data: Aggregated and anonymised analytical data may be retained for longer periods as it no longer constitutes personal data once fully anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

Sohotogel implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or unlawful disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the Platform.
• Encrypted storage of sensitive personal and financial data within our secure database infrastructure.
• Multi-factor authentication options for player accounts and mandatory two-factor authentication for administrative and staff access to player data systems.
• Continuous automated monitoring of Platform systems for suspicious access patterns, intrusion attempts, and anomalous activity.
• Regular penetration testing and security audits conducted by qualified security professionals.
• Strict internal access controls limiting employee access to personal data on a need-to-know basis, with full audit logging of all access events.

Despite the measures we have in place, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the unlikely event of a data breach that affects your personal data, Sohotogel will notify you and any applicable regulatory authority as required by law.

In the course of operating the Sohotogel platform, your personal data may be transferred to and processed in jurisdictions outside of Malaysia, including the jurisdictions in which our hosting infrastructure, licensing authority, and certain third-party service providers are located.

Where personal data is transferred internationally, Sohotogel takes steps to ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection standards. These safeguards may include:

• Execution of data processing agreements with third-party processors incorporating standard data protection clauses.
• Transfer to jurisdictions that have been determined to provide an adequate level of data protection.
• Implementation of supplementary technical and organisational measures where required.

By using the Sohotogel platform, you acknowledge and consent to the transfer of your personal data to and processing in jurisdictions outside Malaysia where such transfers are necessary for the provision of our services.

Subject to applicable law and any overriding legal obligations on Sohotogel, you have the following rights in relation to your personal data:

• Right of Access: You have the right to request confirmation of whether Sohotogel holds personal data about you and, if so, to obtain a copy of that data together with information about how it is processed.
• Right to Rectification: You have the right to request correction of any personal data held about you that is inaccurate or incomplete.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to our legal obligation to retain certain records for the periods described in Section 8 of this Policy.
• Right to Restriction of Processing: In certain circumstances, you have the right to request that Sohotogel restrict the processing of your personal data — for example, while a correction request is under review.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data based on our legitimate interests. Where you object to processing for direct marketing purposes, we will cease that processing without exception.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of these rights, please contact our support team via live chat or email at [email protected]. We will aim to respond to all data rights requests within 30 days. In some cases, we may request proof of identity before processing your request.

The Sohotogel platform is strictly for adults aged 21 years and above. Sohotogel does not knowingly collect or process personal data from individuals under the age of 21.

All accounts are subject to age verification as part of the KYC process. Any account found to be registered by or operated on behalf of a person under 21 years of age will be immediately suspended, and any balance associated with that account will be handled in accordance with our Terms and Conditions and applicable regulatory requirements.

If you have reason to believe that a person under the age of 21 has registered an account with Sohotogel, please contact us immediately via live chat so that we may take appropriate action.

Sohotogel reserves the right to update or amend this Privacy Policy from time to time. Changes may be made to reflect updates in applicable law, changes to our data processing activities, improvements to our Platform, or other operational developments.

Material changes to this Policy will be communicated to registered players via email notification or through a prominent notice displayed on the Platform. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgment of and agreement to the revised terms. We recommend that you review this page periodically to remain informed about how Sohotogel protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or Sohotogel's handling of your personal data, please contact us through one of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the Sohotogel platform. Our average response time is under 3 minutes. Live chat is the fastest way to reach us for data-related enquiries.
• Email: [email protected] (plain text only — not a clickable link; please copy this address into your email client manually)

When submitting a privacy or data rights enquiry, please include your registered username or email address, a clear description of your request, and any relevant account reference numbers. This will help us locate your account and process your request as efficiently as possible.