Sogu88 Privacy Policy – Data Protection for Malaysia Users

1. Introduction and Scope of This Privacy Policy

Sogu88 (hereinafter referred to as "we", "the platform", or "sogu88") places the highest importance on the privacy of every user who visits and uses our services at sogu88.net. This Privacy Policy is provided to give you full transparency on how we handle your personal information — from the moment you register an account to every transaction you make on our platform.

This policy applies to all sogu88 users regardless of access method — whether via web browser, iOS or Android mobile app, or any other digital channel we operate. By using the sogu88 platform, you give informed consent to the collection and processing of data as described here.

This Privacy Policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. In the event of any conflict between a translated version and the original Bahasa Malaysia version, the Bahasa Malaysia version shall prevail.

2. Types of Personal Data We Collect

Sogu88 only collects data that is strictly necessary to provide users with a safe, seamless, and high-quality service. The categories of information we collect are as follows:

We do not collect sensitive information such as biometric data, medical records, or religious belief information. Data belonging to individuals under 18 years of age is not knowingly collected — should we discover such data, it will be deleted immediately.

3. How We Use Your Personal Data

Every piece of data we collect is used for a specific and legitimate purpose. sogu88 will not process your data for unrelated purposes without obtaining fresh consent from you. The primary purposes of data processing are as follows:

• Account Management: To create, verify, and maintain your user account, including the secure login process and two-factor authentication.
• Transaction Processing: To accurately and securely process deposits, withdrawals, and any financial transactions you carry out on the sogu88 platform.
• Identity Verification (KYC): To fulfill legal compliance obligations, including anti-money laundering (AML) requirements and user age verification.
• Service Communications: To send important notifications related to your account, transactions, promotions you have subscribed to, and policy updates.
• Platform Security: To detect and prevent fraudulent activity, account abuse, and cybersecurity threats that may affect the platform.
• Service Improvements: To analyze usage patterns in aggregate (not individually) in order to improve the user experience and platform performance.
• Customer Support: To help resolve issues, answer inquiries, and provide the technical assistance you need.

4. Information Sharing and Disclosure

Sogu88 does not sell, rent, or trade user personal data to any third party for commercial purposes. However, there are limited situations where we need to share your information to allow the platform to operate effectively:

• Payment Providers: Required transaction information is shared with licensed payment processors such as FPX, DuitNow and e-wallet providers to complete your transactions. These providers are bound by strict data protection agreements.
• Game Providers: Minimum required game session data is shared with third-party game providers (such as Pragmatic Play, Evolution Gaming) to operate games properly.
• Identity Verification Services: KYC documents are shared with licensed identity verification providers to meet legal compliance requirements.
• Legal Authorities: sogu88 will disclose required information to the relevant authorities when compelled to do so by a court order, regulatory body directive, or to prevent financial crime.
• Independent Auditors: To the limited extent required, information may be disclosed to security and compliance auditors appointed by sogu88 under confidentiality agreements.

5. Our Data Security Measures

User data security is sogu88's highest priority. We continuously invest in the latest security infrastructure to ensure your information is always protected:

• 256-bit SSL Encryption: All data transmitted between your device and sogu88's servers is protected with the same high-grade SSL encryption used by leading financial institutions.
• Stored Data Encryption: Sensitive data stored in sogu88's databases is protected with AES-256 encryption, ensuring it remains unreadable even in the event of a physical breach.
• Intrusion Detection System: Our platform is equipped with an IDS/IPS system that monitors network traffic 24/7 to detect and block intrusion attempts.
• Layered Access Controls: Access to user data within sogu88's internal systems is restricted to staff who require it for their job responsibilities, with full audit records maintained.
• Regular Security Audits: sogu88 conducts penetration testing and security audits by independent cybersecurity firms at least twice a year.
• Incident Response Plan: We have clear incident response procedures in place. In the event of a data breach, we will notify affected users and the relevant authorities within the timeframe required by law.

While we take all reasonable steps to protect your data, no system can guarantee 100% absolute security. We strongly encourage users to also take personal security measures, such as using strong passwords and not sharing account details.

6. Cookies and Tracking Technologies

Sogu88 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login sessions, security verification, and language preferences. These cookies cannot be disabled.
• Performance Cookies: Helps us understand how users interact with the platform — which pages are visited most, where users may encounter issues, and how we can improve navigation.
• Functional Cookies: Stores your preferences such as language, display settings and login information (if you choose to save them) for a more convenient return experience.
• Analytics Cookies: We use analytics tools to collect usage data in aggregated and anonymised form for platform improvement purposes.

You can manage or delete cookies through your browser settings at any time. However, disabling essential cookies may affect platform functionality. For more information on managing cookies, please refer to your web browser's documentation.

7. Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold. You may exercise these rights by contacting our privacy team:

8. Data Retention and Deletion

Sogu88 retains your personal data only for as long as necessary to fulfill the purposes stated in this Privacy Policy or as required by Malaysian law. Our data retention guidelines are as follows:

• Active Account Data: Retained for the duration your sogu88 account is active, plus 7 years after account closure for legal and tax compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in line with Malaysia's financial and tax legal requirements.
• KYC Documents: Retained for 5 years after account closure, or longer if required by regulatory authorities.
• Security Logs: Retained for 2 years for security incident investigation and fraud detection purposes.
• Marketing Data: Deleted within 30 days after you withdraw consent to receive marketing communications.

When the retention period expires or you submit a valid deletion request, your data will be securely deleted or anonymised in a way that can no longer be linked to you. Our deletion process complies with internationally recognised secure data deletion standards.

9. Changes to This Privacy Policy

Sogu88 may update this Privacy Policy from time to time to reflect changes in our privacy practices, the latest legal requirements, or service improvements. Our notification process is as follows:

• Non-material changes (such as text corrections or additional clarifications) will be updated without specific notice, but the "Updated" date at the top of the page will reflect the change.
• Material changes that affect your privacy rights or how we use your data will be communicated via in-platform notifications and email to your registered address at least 14 days before taking effect.
• Continued use of the sogu88 platform after the effective date of any changes is considered acceptance of the updated Privacy Policy.

We encourage you to review this page regularly. All previous versions of our Privacy Policy are archived and can be requested from the sogu88 privacy team if needed for reference.

10. Contact Our Privacy Officer

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, please contact sogu88's Data Protection Officer (DPO) through the following channels:

• Privacy Email: [email protected] (please state "Privacy Inquiry" in the email subject line)
• Live Chat: Available 24/7 via the sogu88 platform — select the "Privacy & Data" category when starting a chat session.
• Response Time: All privacy inquiries are answered within 3 business days; formal privacy rights requests within 30 business days.

If you believe that sogu88 has not complied with this Privacy Policy or Malaysia's PDPA, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia. sogu88 respects every complaint made and will fully cooperate with any investigation conducted.