Privacy Policy Soji88 — Personal Data Protection for All Malaysia Members

1 Introduction & Scope of the Privacy Policy

Welcome to the soji88 Privacy Policy. This document is designed to transparently and clearly explain how the soji88 platform at soji88.app collects, processes, stores and protects the personal information of all members who register and use our services.

This Privacy Policy applies to all users of the soji88 platform — including those who browse the website, register a new account, use the soji88 mobile app, make deposits or withdrawals, and use any other features available within the soji88 ecosystem.

Soji88 is in full compliance with Malaysia Personal Data Protection Act (PDPA) 2010 and all regulations related thereto. By registering or continuing to use the soji88 platform, you confirm that you have read, understood and fully agreed to this Privacy Policy.

2 Types of Personal Data Collected

Soji88 only collects personal data that is genuinely necessary to provide a safe, fair and high-quality service to all members. We do not collect excessive or irrelevant data beyond the scope of our services.

Identity document data submitted for KYC purposes — such as MyKad or passport images — is stored in a fully encrypted environment and accessible only by specially authorised staff for verification purposes.

3 Purpose of Personal Data Use

Soji88 uses collected personal data solely for legitimate and necessary purposes in the operation of the platform. Every use of data is proportionate to its purpose and does not exceed the limits stated in this Privacy Policy.

• Account Management: Creating, verifying, and managing member accounts — including age eligibility checks, identity verification via KYC, and account tier management.
• Transaction Processing: Processing deposits, withdrawals, bonuses, and all financial transactions securely and accurately in accordance with member instructions.
• Legal Compliance: Fulfilling legal obligations including AMLA (Anti-Money Laundering) requirements, tax reporting, and directives from relevant regulatory bodies.
• Platform Security: Detecting and preventing fraud, account abuse, bot activity, collusion, and other security threats that could affect other members.
• Service Improvement: Analysing usage patterns in aggregate (not individually) to improve user experience, introduce new features, and resolve technical issues.
• Service Communications: Sending important notifications related to accounts, transactions, policy changes, and relevant security information to members.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide the necessary support and intervention.
• Marketing (with consent): Sending promotional offers, bonuses, and the latest updates about soji88 products — only to members who have given consent to receive marketing communications.

4 Data Sharing with Third Parties

Soji88 does not sell members' personal data to any party. However, in the course of platform operations, soji88 may need to share certain information with the following parties within defined limits and with appropriate safeguards.

• Payment Providers: Required financial information is shared with certified and regulated payment service providers — such as local banks and e-wallet providers — solely for the purpose of processing your transactions.
• Technology Partners: Cloud service providers, server infrastructure, and analytics tools used by soji88 may process technical data to ensure the platform operates smoothly and securely.
• Legal Authority: soji88 is required to disclose information to Malaysian authorities when mandated by law — including in criminal investigations, court proceedings or official regulatory directives.
• Identity Verification Providers: Third-party services that assist soji88 in conducting KYC checks and identity document verification — operated within a secure and regulated environment.

All third parties handling soji88 member data are required to sign data protection agreements and adhere to security standards consistent with soji88's privacy policy. soji88 is not responsible for the privacy practices of third-party websites that may be linked from our platform.

5 Data Security & Encryption

Soji88 continuously invests in the latest security infrastructure to ensure the personal data of all members is protected against unauthorised access, breaches, destruction or misuse. The following are the protection layers we implement:

• End-to-End Encryption: All data transmitted between your device and soji88's servers is encrypted using TLS 1.3 protocol with AES-256 encryption — ensuring no intermediary party can intercept or read your communications.
• Sensitive Data Isolation: Financial information and KYC documents are stored in separate systems with strict access controls — isolated from general profile data — to minimise the risk of exposure.
• Two-Factor Authentication (2FA): soji88 provides and encourages the use of 2FA for all accounts — an additional layer of protection that prevents unauthorised access even if your password is compromised.
• 24/7 Security Monitoring: The soji88 security team monitors suspicious activity in real time around the clock using an advanced SIEM (Security Information and Event Management) system.
• Periodic Audits: soji88 conducts penetration testing and security audits by independent third parties on a regular basis to identify and patch any vulnerabilities before they can be exploited.
• Data Backup: Member data is automatically backed up to separate, secure locations — ensuring your information is never lost even in the event of a technical disruption or disaster

6 Cookies, Tracking & Similar Technologies

Soji88 uses cookies and similar tracking technologies to enhance the user experience, maintain login session security, and analyse how the platform is used for continuous improvement purposes.

• Essential Cookies: Required for core platform functions such as maintaining your login session, saving language preferences, and securing transactions — cannot be disabled without affecting platform functionality
• Performance Cookies: Collecting aggregate data on how pages are used — such as the most frequently visited pages and time spent — to help soji88 understand usage patterns and improve platform performance.
• Functional Cookies: Storing your personal preferences such as display settings, favourite game selections, and interface configurations — enabling a more personalised experience each time you log in.
• Marketing Cookies: Used only with your consent to display more relevant content and offers based on your interests — you may withdraw this consent at any time through your browser or account settings

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality or user experience of the soji88 platform. soji88 uses analytics tools that receive only aggregated data and cannot directly identify individuals from that data.

7 Your Privacy Rights as a soji88 Member

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you as a soji88 member have the following rights regarding your personal data. soji88 fully respects and facilitates the exercise of these rights.

• Right to Access: You have the right to request a copy of the personal data held by soji88 about you — including profile information, transaction history, and communication records within the period stipulated by law
• Right to Correction: If you find that any data held by soji88 is inaccurate or outdated, you have the right to request an immediate correction through your account settings or our support channels.
• Right to Withdraw Consent: For data processed on the basis of consent — such as marketing communications — you may withdraw your consent at any time without affecting the validity of processing that took place prior to withdrawal.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes — and soji88 will cease such processing immediately upon receiving your objection
• Right to Erasure (Limited): Under certain circumstances provided by law, you may request the deletion of your personal data — subject to soji88's legal obligations to retain certain records

To exercise any of the above rights, please submit a written request to the soji88 privacy team. We will process your request within 21 business days of receipt and may require identity verification before responding.

8 Contact Us About Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or how soji88 handles your personal data, our team is ready to assist. We take every privacy feedback seriously and will respond within a reasonable timeframe.

• Privacy Email: Send your written enquiry to [email protected] with the subject line "Privacy Enquiry" to expedite processing by the responsible team.
• Live Chat: Contact soji88's customer support team via the live chat feature within the platform — available 24 hours a day, 7 days a week to assist with privacy and account enquiries
• Formal Request: For data access, correction or deletion requests requiring formal processing, please use the official email with a valid proof of identity attached to expedite the verification process.

Soji88 also wishes to inform you that you have the right to lodge a complaint with Malaysia Personal Data Protection Department if you believe that soji88 has violated your privacy rights under PDPA 2010 — although we always encourage you to contact us first so we can resolve any issues promptly.