Soda77 Privacy Policy – Your Information Fully Protected

Soda77 ("we", "Platform", or "soda77") is fully committed to protecting the privacy and security of the personal information of every user on our platform. This Privacy Policy ("Policy") describes in detail how we collect, use, disclose, transfer, and store information relating to you.

This policy applies to all users of the soda77 platform, including those who browse our website without registering an account, registered members, and anyone who interacts with our services via mobile app, website, or any other official communication channel.

Soda77 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. We regard your trust as our most valuable asset, and every data-related decision is made with your best interests and privacy as the priority.

Soda77 only collects information that is genuinely necessary to provide you with a safe, efficient, and personalized service. The following are the categories of data we collect:

2.1 Identity Information

• Full name as it appears on your official identification document.
• Date of birth for age verification (18 years and above).
• National identity card number, passport, or other official identification document number (for the KYC process).
• Images of identity documents submitted during the identity verification process.

2.2 Contact Information

• Registered email address.
• An active mobile phone number.
• The username chosen during registration.

2.3 Financial Information

• Bank account details for the purpose of processing deposits and withdrawals.
• E-wallet information (Touch 'n Go, GrabPay, Boost, and others).
• Deposit and withdrawal transaction history.
• Credit/debit card information (stored in encrypted form and inaccessible to staff).

2.4 Platform Usage Information

• Game history and wagering activity.
• Login records including date, time, and location (based on IP address).
• Game options, account settings, and platform interactions.
• Communication history with the customer support team.

2.5 Technical Information

• IP address of the device used for access.
• Browser type, operating system, and device information.
• Cookie data and session identifiers.
• Error logs and diagnostic data for system improvements.

Soda77 collects your personal information through various transparent and lawful means:

3.1 Direct Collection

Data you voluntarily provide during:

• The new account registration process.
• Document submission for identity verification (KYC).
• Communications with our customer support team.
• Participation in promotions, lucky draws, or surveys.
• Update your account profile information.

3.2 Automatic Collection

Data collected automatically through use of the platform:

• Session cookies and preference cookies while you browse the platform.
• Server logs recording access activity and transactions.
• Behavioral detection technology for security and fraud prevention purposes.
• Aggregated analytics data on platform feature usage.

3.3 Third-Party Sources

In certain cases, soda77 may receive information from trusted sources such as:

• Identity verification service providers for KYC purposes.
• Financial institutions for payment details verification.
• Fraud prevention agencies and gambling industry blacklist registries.
• Social media networks if you choose to register using a social account.

Soda77 uses your personal data only for legitimate purposes that are transparently stated below. We will not process your data for any other purpose without notifying you in advance:

• Account Management: To create, verify, maintain, and protect your account on the soda77 platform.
• Transaction Processing: To securely and accurately process deposits, withdrawals, and all financial transactions related to your account.
• Identity Verification (KYC): To fulfill legal requirements for verifying user identity and ensuring the platform remains free from fraud or money laundering activities.
• Platform Security: To detect, prevent, and investigate fraudulent activity, unauthorized access, and other security threats to your account and the platform as a whole.
• Customer Support: Providing effective assistance when you contact our support team, including resolving complaints and technical inquiries.
• Service Communications: To send important account notifications, security updates, policy changes, and transaction information.
• Service Improvement: To analyze aggregated and anonymized usage patterns in order to improve platform functionality, design, and performance.
• Legal Compliance: To meet the legal, regulatory, and licensing obligations applicable to soda77 as an online gambling platform operator.
• Marketing (with consent): To send promotional information, bonus offers, and the latest news related to soda77 – only to users who have given explicit consent.

Soda77 maintains a strict policy on sharing users' personal data. We only disclose your information in limited situations and with strict controls:

5.1 Trusted Service Providers

Soda77 works with selected business partners who help operate our platform, including payment service providers, licensed game providers, secure cloud services, and analytics companies. All these partners:

• Required to sign a strict data confidentiality agreement.
• Your data may only be used for the specific purposes defined in the contract.
• Subject to periodic security audits by the soda77 technical team.
• Your data will not be disclosed to any third party.

5.2 Legal & Regulatory Requirements

Soda77 may need to disclose your information to authorities in the following circumstances:

• By court order or direction of a lawful authority.
• To comply with anti-money laundering (AML) reporting obligations.
• In criminal investigations involving activities on the soda77 platform.
• To meet the requirements of our licensing regulatory authority.

5.3 What We Do Not Do

Soda77 implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, loss, destruction, or accidental disclosure:

• Data Encryption in Transit: All communications between your device and soda77's servers are encrypted using TLS 1.3 protocol with a 256-bit SSL certificate.
• Data Encryption at Rest: Data stored in our databases is encrypted using AES-256, including passwords stored in hashed form that cannot be decrypted.
• Tiered Access Control: Access to user data is restricted based on the principle of least privilege — only staff who require access for their specific duties are permitted.
• Continuous Security Monitoring: Our SIEM (Security Information and Event Management) system monitors all platform activity 24 hours a day, 7 days a week.
• Regular Penetration Testing: soda77 conducts regular security testing (penetration testing) by independent security experts to identify and address system vulnerabilities.
• Two-Factor Authentication: 2FA is available for all user accounts and mandatory for all staff accounts with data access.
• Incident Response Plan: soda77 has a tested security incident response procedure, ensuring any data breach is handled swiftly and affected users are notified within 72 hours.

Soda77 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse a website.

7.1 Types of Cookies We Use

7.2 Managing Your Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, delete or block cookies. Please note, however, that blocking essential cookies may affect the functionality of the soda77 platform, including the ability to log in and carry out transactions.

Soda77 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following are our data retention guidelines:

• Active Account Data: Retained for the duration your account remains active, and for an additional period following account closure as required by law.
• Financial & Transaction Records: Retained for a minimum of 7 years after the transaction occurs, in accordance with Malaysia's financial legal requirements.
• KYC Documents: Retained for a minimum of 5 years after the business relationship ends, as required by anti-money laundering regulations.
• Support Communication Logs: Retained for 2 years for quality control and dispute resolution purposes.
• Technical Log Data: Retained for 90 days for security and troubleshooting purposes.
• Marketing Data: Deleted within 30 days after you withdraw consent for marketing communications.

When data is no longer needed, soda77 ensures it is securely deleted or anonymised using procedures that meet international information security standards.

Soda77 operates as a global platform and your personal data may be processed or stored on servers located outside Malaysia. When this occurs, we ensure a level of protection equivalent to or higher than that required by Malaysian law.

All cross-border data transfers are carried out with appropriate safeguards, including:

• Binding data processing agreements with service providers in the recipient country.
• Use of data centers compliant with ISO 27001 and SOC 2 Type II standards.
• Data protection impact assessments prior to any new data transfer to a new jurisdiction.

As a soda77 user, you have the following rights regarding your personal data. To exercise any of these rights, please contact our privacy team through the channels stated in Section 14:

10.1 How to Submit a Request

1. Contact soda77 customer support via live chat or official communication channels.
2. Clearly state the right you wish to exercise and provide sufficient account information for identity verification.
3. Soda77 will verify your identity within 2 working days.
4. Requests will be processed and a response provided within 14 working days from the date of identity verification.
5. For complex requests, this period may be extended up to 30 working days with notification to you.

10.2 No Fees for Rights Requests

Soda77 does not charge fees for data protection rights requests under normal circumstances. However, if your request is repetitive, excessive, or clearly unreasonable, we reserve the right to charge a reasonable administrative fee or decline the request with a written explanation.

The soda77 platform is for the exclusive use of individuals who are of age 18 years and above only. We do not intentionally collect, process, or store any personal information from individuals under the age of 18.

Soda77 implements multiple age verification mechanisms during the registration process, including identity document checks, to ensure only eligible adults may use our platform.

The soda77 platform may contain links or integrations with third-party services such as game providers, payment gateways, and other service providers. It is important to understand that:

• The soda77 Privacy Policy applies only to data collected and processed directly by soda77.
• When you interact with third-party services through our platform, their privacy practices may differ from ours.
• Soda77 is not responsible for the privacy practices or content of third-party websites or services.
• We encourage you to read the privacy policy of every third party you interact with.

That said, soda77 carefully selects third-party partners and ensures they meet adequate data protection standards before any integration is carried out.

Soda77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. When we make material changes:

• Notifications will be displayed on the platform's main page for at least 14 days before the amendment takes effect.
• Registered users will be notified via an in-account notification during their next login session.
• The "Updated" date at the top of this policy will be updated to reflect the date of the latest amendment.

Continued use of the soda77 platform after an amendment takes effect is considered acceptance of the revised policy. If you do not agree with the amendment, you have the right to close your account before the effective date by contacting our support team.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how soda77 handles your personal data, our privacy team is ready to assist through the following channels:

• 24/7 Live Chat: Fastest channel – response in under 1 minute, available directly within the soda77 platform.
• Telegram: Reach our dedicated privacy agent via soda77's official Telegram channel.
• WhatsApp: Send a message to our support team via the official WhatsApp number listed on the platform.
• Privacy Email: [email protected] – exclusively for privacy and data protection enquiries.

For information on responsible gaming and user protection, please visit the Responsible Gaming and FAQ ours. To fully understand your rights and responsibilities as a soda77 user, please also read Terms and Conditions ours.