Sorongtoto Privacy Policy

This Privacy Policy applies to personal data processed by sorongtoto when you visit https://sorongtoto.cam, create or use an account, complete identity verification, make a deposit or withdrawal, place a sports bet, access a live casino game, communicate with support, or use another feature provided through the platform.

For the purposes of this policy, “personal data” means information that identifies you or can reasonably be connected with you. “Processing” includes collecting, recording, organising, using, analysing, sharing, protecting, retaining, and deleting personal data. References to “we”, “us”, and “our” mean sorongtoto, while “you” means the individual using the platform.

Sorongtoto serves Malaysian players in locations including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. Although this Privacy Policy describes practices relevant to Malaysian users, data may be processed in other jurisdictions where our internationally based service infrastructure operates. Sorongtoto applies contractual and technical safeguards to such processing where reasonably required.

Sorongtoto may collect the following categories of personal data, depending on how you use the platform:

• Registration details: legal name, username, date of birth, residential address, nationality, email address, Malaysian phone number, preferred language, and account credentials.
• KYC information: MyKad or passport details, proof of address, selfie or identity comparison material, age verification results, source-of-funds information, and records produced during compliance reviews.
• Payment information: deposit and withdrawal amounts, transaction references, bank or e-wallet identifiers, masked account details, payment status, currency, and records associated with MYR transactions.
• Betting and gaming records: wagers, stakes, odds, winnings, losses, bonus activity, game sessions, live casino participation, and activity involving markets such as EPL, Liga Super Malaysia, UFC, and esports.
• Device and technical information: IP address, browser type, operating system, device identifiers, approximate location, login time, language settings, session data, and security events.
• Communications: Live Chat transcripts, email correspondence, complaint records, responsible gambling requests, and notes created when support assists with an account.
• Preference information: selected sports, game categories, payment preferences, language choices, communication settings, and promotions viewed or used.

Information is obtained directly from you, automatically from your device, through your activity on sorongtoto, and from payment, identity verification, fraud prevention, or technical service providers. We may combine those records where reasonably necessary to protect the platform and administer your account.

Sorongtoto processes personal data for clearly defined operational, security, and compliance purposes, including to:

• create, authenticate, maintain, and secure your sorongtoto account;
• verify identity, age, address, payment ownership, and account eligibility;
• accept bets, settle results, calculate balances, administer bonuses, and maintain accurate gaming records;
• process deposits and withdrawals through Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and supported digital assets;
• detect suspicious activity, duplicate accounts, payment misuse, collusion, bonus abuse, money laundering risks, and unauthorised access;
• apply deposit limits, cooling-off periods, self-exclusion, reality checks, and other responsible gambling measures;
• respond to questions, resolve disputes, investigate complaints, and provide support in English, Bahasa Melayu, or Chinese;
• monitor performance, correct errors, improve mobile usability, and keep sorongtoto stable during high-traffic football or live casino events;
• provide account notices and, where permitted, relevant information about sorongtoto services or promotions; and
• comply with applicable legal duties, licensing conditions, court orders, or lawful requests.

Sorongtoto does not sell personal data. We do not use KYC documents or payment details for unrelated advertising. Where analytics are used to understand platform performance, we aim to use aggregated, restricted, or pseudonymised information where practical.

Depending on the nature of the activity and the law that applies, sorongtoto may process personal data because it is necessary to perform our contract with you, comply with a legal obligation, pursue a legitimate operational or security interest, protect vital interests, or act on your consent.

Contractual necessity

We require certain information to register your account, accept wagers, settle results, administer MYR balances, provide support, and process eligible withdrawals. Without that information, sorongtoto may be unable to provide the requested service.

Legal and compliance obligations

Identity, transaction, and risk information may be processed to meet international licensing requirements, financial crime controls, audit duties, age restrictions, and record-keeping obligations.

Legitimate interests

Sorongtoto has legitimate interests in securing accounts, preventing fraud, maintaining fair play, improving platform reliability, handling complaints, and protecting users. We assess those interests against the rights and reasonable expectations of the affected individual.

Consent

Where consent is required, it will be requested in a clear manner. You may withdraw consent for future processing, but withdrawal does not affect processing already carried out lawfully or information that sorongtoto must retain for another valid reason.

Sorongtoto may share the minimum personal data reasonably necessary with vetted service providers that support account verification, payment processing, hosting, cybersecurity, customer service, fraud detection, game delivery, analytics, auditing, or responsible gambling controls. Those organisations are expected to process information only for authorised purposes and to apply appropriate confidentiality and security measures.

Personal data may also be disclosed where required to establish, exercise, or defend legal claims; respond to a valid court order or lawful authority request; investigate suspected fraud or criminal activity; protect a person's safety; or enforce the sorongtoto Terms and Conditions.

If ownership or control of all or part of the business changes, relevant records may be transferred as part of that transaction, subject to confidentiality arrangements and applicable data protection requirements. Sorongtoto does not disclose player data to unrelated businesses for them to sell or independently market their products.

Payment information is processed to credit deposits, verify ownership, authorise withdrawals, reconcile balances, detect suspicious transactions, and respond to payment disputes. A transaction using Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, or Hong Leong may generate identifiers and status information that sorongtoto stores alongside your account record.

Sorongtoto generally does not require full online banking passwords or e-wallet PINs. Those credentials should be entered only within the secure interface supplied by your bank or payment provider. You must never send a password, PIN, one-time password, or complete card security code to sorongtoto support.

Cryptocurrency transaction details, including wallet addresses and public blockchain references, may be retained where USDT TRC20 or Bitcoin is supported. Blockchain records are public and ordinarily cannot be altered or deleted by sorongtoto. Additional source-of-funds checks may be requested for high-value, unusual, or higher-risk transactions.

Sorongtoto retains personal data only for as long as reasonably necessary for the purpose for which it was collected, or for a longer period where legal, licensing, security, tax, accounting, dispute, or anti-fraud requirements apply. Retention periods vary by data category and the status of your account.

Active account records are generally retained while the account remains open. KYC documents, payment histories, betting records, security logs, and complaint information may be retained after closure to satisfy record-keeping duties and prevent excluded, fraudulent, or duplicate registrations. Data that is no longer needed is deleted, anonymised, or placed beyond ordinary operational use under controlled retention procedures.

A deletion request does not automatically require the immediate erasure of every record. Sorongtoto may preserve information where retention is necessary to comply with law, resolve a dispute, enforce an agreement, maintain a self-exclusion, protect platform integrity, or establish a legal claim.

Sorongtoto maintains administrative, technical, and organisational safeguards proportionate to the nature and sensitivity of the information processed. These controls may include encrypted data transmission, access restrictions, authentication controls, monitoring, backup procedures, secure development practices, staff confidentiality duties, and incident response processes.

No internet service can guarantee absolute security. Users also have an important role in protecting their information. Choose a strong, unique password; do not share account credentials; sign out on shared devices; review unusual account activity; and notify sorongtoto promptly if you suspect unauthorised access.

If a personal data incident creates a material risk to affected users, sorongtoto will investigate, contain the incident, and provide notice where required by applicable law or regulatory obligations. Such notice may describe the information involved, likely consequences, and recommended protective steps.

Sorongtoto may use cookies, local storage, session identifiers, and similar technologies to keep users signed in, remember preferences, protect accounts, identify suspicious sessions, measure page performance, and maintain platform functionality. Essential technologies are required for services such as authentication, payment flow continuity, and security.

Functional technologies may remember language, display, or account preferences. Analytics technologies may help us understand aggregated usage, such as whether Malaysian users encounter slow loading during a major EPL match. Where legally required, non-essential technologies are used only after an appropriate choice has been provided.

Browser settings can block or remove some cookies. However, disabling essential storage may prevent login, interfere with the cashier, interrupt a live casino session, or stop other sorongtoto features from working correctly.

Subject to applicable law, identity verification, and lawful exceptions, you may have the right to request access to personal data, correct inaccurate information, obtain a copy of certain records, object to or restrict some processing, withdraw consent, or request deletion.

To protect player information, sorongtoto will verify the identity of the requester before fulfilling a privacy request. We may ask for the registered username, account ID, or limited KYC confirmation. We will respond within a reasonable period and explain any lawful limitation that prevents us from completing the request in full.

Sorongtoto may analyse account activity to identify indicators of harmful or unusual gambling. Relevant information may include deposit frequency, rapid changes in stakes, repeated cancelled withdrawals, extended sessions, attempts to exceed limits, or communications suggesting distress. Such reviews support responsible gambling interventions and platform safety.

Where appropriate, sorongtoto may present a reality check, recommend a cooling-off period, offer deposit or loss limits, restrict promotional communications, request contact with support, or apply a self-exclusion. Information connected with self-exclusion may be retained after account closure so that the restriction remains effective and cannot be easily bypassed.

Responsible gambling reviews are intended to reduce harm and do not guarantee that every risk will be identified. Players remain responsible for setting affordable budgets and seeking support when gambling is no longer enjoyable. Further guidance is available on our Responsible Gambling page.

Some sorongtoto service providers and technical systems may be located outside Malaysia or outside your country of residence. Consequently, personal data may be transferred to or accessed from jurisdictions whose privacy laws differ from those in Malaysia.

Where appropriate, sorongtoto uses contractual obligations, access restrictions, security assessments, encryption, data minimisation, or comparable safeguards designed to protect transferred information. We consider the nature of the data, purpose of processing, destination, service provider controls, and legal requirements when managing international transfers.

Sorongtoto may revise this Privacy Policy to reflect changes in our services, technology, legal obligations, payment methods, or security practices. The effective date shown at the top of this page will be updated when a revision is published.

If a change materially affects how existing personal data is used, sorongtoto will provide an appropriate notice through the platform or another available account communication channel. Continued use after the effective date means that you acknowledge the revised policy, but it does not remove any consent right or mandatory protection provided by applicable law.

If you have a privacy question, wish to exercise a data right, or believe your information has been used incorrectly, contact the sorongtoto support team. Support is available 24/7 in English, Bahasa Melayu, and Chinese.

• Email: [email protected]
• Live Chat: Available through the sorongtoto platform.
• Request details: Include your registered username, account ID, the right you wish to exercise, and enough information for us to understand the request.