Sojo88 Privacy Policy – Member Personal Data Protection

1Introduction and Scope of This Policy

Sojo88 ("we", "the Company") takes seriously our responsibility to protect the privacy and personal data of every member who uses our platform. This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and the highest international standards in data management.

This policy applies to all information we collect when you register an account, use the gaming platform, make deposits or withdrawals, contact our support team, or interact with any part of the sojo88 digital ecosystem — including our main website and mobile app.

We encourage you to read this Privacy Policy in full before registering. By using the sojo88 platform, you acknowledge that you have understood and agreed to the practices described in this document.

2Types of Personal Data We Collect

To provide a secure, seamless, and personalised service, sojo88 collects several categories of personal data from our members. The following is a summary of the types of data we collect and their primary purposes:

We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive information such as biometric data, medical records or religious beliefs unless specifically required to meet certain legal obligations.

3How We Collect Your Personal Data

Sojo88 collects personal data through several different methods, depending on the context of your interaction with our platform:

• Account Registration: When you complete the registration form, you directly provide us with basic information such as your name, phone number, and email address.
• KYC Verification: During the identity verification process, you submit documents such as a copy of your ID and proof of bank account. These documents are processed securely and stored in accordance with strict data protection standards.
• Financial Transactions: Every time you make a deposit or withdrawal, our system records the transaction details for financial record-keeping and security purposes.
• Platform Usage: Automatically, our system records technical data and gaming activity data when you use the platform. This includes your IP address, device type, and usage patterns.
• Cookies and Tracking Technologies: The sojo88 website uses cookies and similar technologies to improve user experience and analyze website traffic.
• Support Channels: When you contact our support team via live chat or email, those conversations are recorded for quality control and dispute resolution purposes.

4Purpose of Personal Data Use

Every piece of personal data we collect is used for a specific and legitimate purpose. The following are the primary purposes for which sojo88 uses your data:

1. Account Management: Creating, verifying and maintaining your account; processing logins and ensuring account security at all times.
2. Transaction Processing: Facilitating deposits, withdrawals and any other financial transactions quickly and securely using your preferred payment method.
3. KYC and AML Compliance: Verifying member identities and monitoring transactions to meet anti-money laundering (AML) and counter-terrorism financing legal requirements.
4. Customer Support: Providing effective and personalized assistance when you contact our support team; interactions are recorded for quality control purposes.
5. Platform Security: Detecting, investigating and preventing fraud, account abuse, system manipulation and other illicit activities.
6. Service Improvement: Analyzing platform usage patterns in aggregate to improve game quality, platform speed and overall user experience.
7. Marketing Communications: Sending information about promotions, platform updates and exclusive offers – only with your explicit consent, which can be withdrawn at any time.

We will not use your data for any purpose other than those stated above without first obtaining your additional consent.

5Data Sharing with Third Parties

Sojo88 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are limited situations where we need to share your data with certain parties in order to provide our services:

• Payment Service Providers: Your financial data is shared with legitimate payment service providers (such as banks, e-wallet operators, and payment processors) to facilitate deposit and withdrawal transactions.
• Game Providers: Basic account information may be shared with licensed game providers to allow you to access their games through the sojo88 platform.
• KYC Verification Partners: Your identity information is shared with licensed third-party identity verification partners to process KYC verification quickly and securely.
• Authorities and Regulatory Bodies: We may be required to disclose data to the relevant authorities when mandated by law or court order.
• Professional Advisors: In certain situations, legal or financial advisors bound by confidentiality agreements may need to access data to provide professional advice.

All third parties that receive sojo88 member data are bound by strict data protection agreements and are only permitted to use that data for the purposes specified in those agreements.

6Data Security Measures

Protecting our members' personal data is an absolute priority for sojo88. We implement multiple layers of technical and organizational security to ensure your data remains safe at all times:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and sojo88's servers is encrypted using the latest industry-standard encryption technology, making it unreadable to any unauthorised party.
• Stored Data Encryption: Sensitive data such as financial information and KYC documents are stored in encrypted format on our servers.
• Strict Access Control: Only staff with a legitimate business need who have undergone background checks are permitted to access member personal data. All access is recorded and regularly audited.
• Two-Factor Authentication (2FA): Our internal systems require two-factor authentication for access to databases containing sensitive member information.
• Continuous Monitoring: Our security monitoring system operates 24/7 to promptly detect any suspicious activity or unauthorised access attempts.
• Regular Security Audits: We conduct regular penetration testing and security audits involving independent security experts to identify and address any vulnerabilities.

7Data Retention Period

Sojo88 retains your personal data for as long as your account is active or as long as necessary to provide services to you. The following are data retention guidelines by category:

• Active Account Data: Retained for the full duration that your account remains active at sojo88.
• KYC Records and Identity Documents: Retained for a minimum of 6 years after account closure, in line with applicable AML legal requirements in Malaysia.
• Financial Transaction Records: Retained for 7 years from the transaction date, in line with applicable accounting and tax requirements.
• Technical Logs and Activity Data: Typically retained for 12 months before being deleted or anonymised.
• Support Communication Records: Retained for 3 years for quality control and dispute resolution purposes.

Upon expiry of the relevant retention period, your data will be securely deleted or fully anonymised so that it can no longer be personally linked to you.

8Your Rights Regarding Personal Data

As a sojo88 member, you have certain rights regarding your personal data under Malaysia's PDPA. We are committed to facilitating the exercise of these rights in a straightforward and transparent manner:

• Right of Access: You have the right to request a copy of the personal data we hold about you. Such requests will be processed within 21 working days.
• Right to Rectification: If you find that the data we hold is inaccurate or outdated, you have the right to request a correction. You may update certain information directly through your account settings.
• Right to Erasure: Under certain circumstances, you may request the deletion of your personal data. Please note that this right may be limited by our legal obligations to retain certain records.
• Right to Withdraw Consent: For data processing that relies on your consent (such as marketing communications), you may withdraw your consent at any time without affecting the validity of any processing carried out prior to that withdrawal.
• Right to Object: You have the right to object to the processing of your personal data for certain purposes, including direct marketing.
• Data Portability: You have the right to receive your personal data in a machine-readable format for transfer to another service provider.

To exercise any of the above rights, please contact our data protection team through sojo88's official support channels. Your request will be verified and processed in accordance with the established procedures.

9Cookies and Tracking Technologies

The sojo88 website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website performance and deliver more relevant content. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how visitors use our website, such as the most frequently visited pages and time spent. All information is aggregated and anonymized.
• Functional Cookies: Remembering your preferences such as language and display settings to provide a more personalized experience.
• Analytics Cookies: Used to understand usage patterns and improve the design and content of our platform.

You can manage cookie settings through your web browser preferences. Disabling certain cookies may affect the functionality of parts of the sojo88 platform. For more information on managing cookies, please refer to your web browser's help documentation.

10Third-Party Links and Services

The sojo88 platform integrates certain third-party services such as game providers, payment processors, and analytics tools to deliver a complete gaming experience. While we carefully select our third-party partners, this Privacy Policy covers only the data processing carried out directly by sojo88.

Each third-party provider integrated with our platform has its own privacy policy governing their data processing. We recommend you review the privacy policies of the relevant game and payment providers if you wish to understand further how they handle your data.

11Amendments to This Privacy Policy

Sojo88 reserves the right to modify or update this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or technological developments. Any material amendments will be communicated to members via an in-platform notice or email at least 14 days before the amendment takes effect.

The "Updated" date at the top of this document will always reflect the latest version of the Privacy Policy currently in force. Your continued use of the sojo88 platform after the amendment's effective date will be deemed as your acceptance of the revised terms.

12Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact sojo88's Data Protection Officer (DPO) through the following channels:

• Email: [email protected] (response time within 3 business days)
• Live Chat: Available 24/7 via the chat icon on the sojo88 platform
• Frequently Asked Questions: Visit page FAQ us for instant answers to the most frequently asked questions

We are committed to addressing every privacy-related inquiry seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia.