Privacy Policy

Privacy Policy & Data Protection Soda77

Your privacy is our priority. This document clearly explains how soda77 collects, uses, stores, and protects your personal information as a user of our platform in Malaysia.

Effective Date
1 January 2026
Last Updated
1 July 2026
Compliance
Malaysia PDPA

How Soda77 Protects Your Privacy

Six core principles that underpin how soda77 handles every user's personal information with full trust and accountability.

Bank-Level Encryption

All your personal and financial information is protected by 256-bit SSL encryption — the same level of security used by leading banking institutions in Malaysia. No data is transmitted without full protection.

Data Not Sold

Soda77 has never and will never sell, rent, or transfer your personal information to third parties for marketing or commercial purposes without your explicit prior consent.

Secure Data Storage

All user data is stored on servers protected by layered firewalls, intrusion detection systems, and strict access controls. Only authorized personnel are permitted to access user data.

Full Control in Your Hands

You have the right to access, correct, or request the deletion of your personal data at any time. Soda77 takes every privacy-related request seriously and processes them promptly.

Cookie Usage Transparency

Soda77 uses cookies solely to enhance user experience and for internal analytics. You can manage your cookie settings through your browser and choose to disable non-essential cookies at any time.

Malaysia PDPA Compliance

The soda77 Privacy Policy is designed in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring all data handling practices are fully compliant with local legal requirements.

Soda77 ("we", "our platform") values the privacy of every user on the soda77.win platform. This Privacy Policy transparently explains how we collect, use, store, and protect your personal information when you register and use our services. By using the soda77 platform, you agree to the practices described in this Privacy Policy.

This Privacy Policy applies alongside the soda77 Terms and Conditions. We encourage you to read both documents before registering an account.

1Information We Collect

1.1 Information You Provide Directly

When you register an account at soda77, we collect the personal information you provide, including:

  • Identity information — Full name, date of birth, identity card number or passport number.
  • Contact information — Email address, mobile phone number, and residential address.
  • Financial information — Bank account number, e-wallet details (Touch 'n Go, GrabPay), or other payment method information you use for deposits and withdrawals.
  • Verification documents — Copy of identity card, passport, or other KYC documents required for identity verification.

1.2 Information Collected Automatically

When you use the soda77 platform — whether via the website or mobile app — certain information is collected automatically to ensure the service runs smoothly and securely:

  • Device data — Device type, operating system, phone model, and app version.
  • Log data — IP address, access times, pages visited, and in-platform actions.
  • Location data — General location based on IP address for security verification and legal compliance purposes.
  • Game session data — Betting history, game results, play duration, and usage patterns.
Data Categories Example Primary Purpose
Identity Name, ID number, date of birth KYC verification, fraud prevention
Contact Email, phone Communications, account notifications
Finance Bank account, e-wallet Deposit & withdrawal processing
Technical IP, device, logs Security, fraud detection
Games Betting history Responsible gaming, support

2How We Use Your Data

Soda77 uses collected information exclusively for legitimate and necessary purposes. The following are the primary ways we use your data:

2.1 Platform Operations

Your data is used to manage your account, process financial transactions, verify your identity, and ensure the platform operates smoothly and securely for all soda77 users.

2.2 Security & Fraud Prevention

Login details, IP addresses, and device data are used by soda77's security systems to detect suspicious activity, prevent unauthorized access, and protect your account from external threats.

2.3 Responsible Gaming

Game session data and wagering patterns are analysed to identify early signs of gambling-related issues. This enables soda77 to offer timely assistance to users who may need responsible gaming support.

2.4 Communication & Customer Support

Your contact information is used to send important account notifications, promotional updates (if you have opted in to receive them), and responses to customer support inquiries.

2.5 Legal Compliance

Soda77 uses and retains user data only to the extent necessary to comply with legal obligations, including anti-money laundering (AML) requirements and reporting obligations set by relevant authorities.

Soda77 does not use your data for third-party advertising purposes or sell user profiles to any external entity without your consent.

3Sharing Information with Third Parties

Soda77 does not share your personal information with third parties except in the following situations required for platform operations:

  • Payment processors — Transaction information is shared with approved payment providers (such as FPX gateway, DuitNow, and crypto processors) solely to process your deposits and withdrawals.
  • Technology service providers — Technical partners who assist in managing platform infrastructure, analytics, and cybersecurity. All such providers are bound by strict confidentiality agreements.
  • Game providers — Required session information is shared with licensed game developers to ensure a smooth and fair gaming experience.
  • Legal authorities — Soda77 will disclose required information to relevant authorities if mandated by law, court order, or official investigation.

Soda77 has never sold your personal data to advertisers, data brokers, or any third parties for commercial purposes. This is our absolute commitment to every user.

4Data Security

4.1 Technical Measures

Soda77 implements multiple layers of technical security to protect your personal data from unauthorized access, data breaches, or misuse:

  • 256-bit SSL encryption — All communications between your device and soda77 servers are encrypted using the latest TLS protocol.
  • Two-factor authentication (2FA) — An additional security layer available to all user accounts.
  • Multi-layered firewall — A multi-layered firewall system protects server infrastructure from external attacks.
  • Intrusion detection system (IDS) — Real-time monitoring to detect and respond to any security threats.
  • Regular security audits — Soda77 conducts regular penetration testing and security audits by independent third parties.

4.2 Organisational Measures

On an organisational level, access to users' personal data is restricted to staff who require it to perform their duties. All staff who handle user data have undergone data protection training and are bound by confidentiality agreements.

While soda77 implements comprehensive security measures, no system can be guaranteed 100% secure. We encourage you to take personal precautions as well, such as using a strong password and not sharing your login details.

5Cookies & Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files stored on your device when you visit the soda77 website. They help us recognize you on future visits, remember your preferences, and improve your overall browsing experience.

5.2 Types of Cookies Used

  • Essential cookies — Required for core platform functions such as login and game sessions. These cookies cannot be disabled.
  • Performance cookies — Collecting information on how users interact with the platform to help us improve our services.
  • Functional cookies — Remembering your preferences such as language, display settings, and other personal choices.
  • Analytics cookies — Used for internal traffic analytics to understand usage patterns and improve the soda77 platform.

5.3 Cookie Management

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the soda77 platform. For detailed instructions on managing cookies in popular browsers, please refer to your browser's documentation.

6Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and soda77's policy, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of all personal data we hold about you. Soda77 will provide this information within 14 business days.

Right to Rectification

If any information we hold about you is inaccurate or outdated, you have the right to request a correction through your account settings or customer support.

Right to Erasure

You may request the deletion of your personal data upon account closure, subject to applicable legal retention requirements.

Right to Object

You have the right to object to the processing of your data for specific purposes such as direct marketing by contacting our support team.

Right to Data Portability

You may request a copy of your data in a machine-readable format for transfer to another service provider where applicable.

Right to Restrict Processing

In certain circumstances, you have the right to request that soda77 restrict how your data is processed while an issue is being resolved.

To submit any request regarding your privacy rights, contact the soda77 support team via live chat on the platform. We will process your request within 14 business days from the date of receipt.

7Data Retention & Deletion

7.1 Retention Period

Soda77 retains your personal data for as long as your account is active and for the required period following account closure to comply with legal obligations. Specifically:

  • Financial transaction data — stored for a minimum of 7 years after a transaction is made, in accordance with Malaysia's financial regulatory requirements.
  • Identity verification data (KYC) — stored for a minimum of 5 years after account closure for AML compliance purposes.
  • Communication and support data — stored for 3 years for customer service reference.
  • Technical log data — stored for 12 months for security and troubleshooting purposes.

7.2 Deletion After Retention Period

When data is no longer needed and the minimum retention period has expired, soda77 will securely delete or anonymise the data using methods that ensure it cannot be recovered.

8Children's Privacy

The soda77 platform is strictly for individuals aged 18 years and above only. Soda77 does not intentionally collect, store, or process any personal information from minors.

If we discover that personal information of a minor has been collected without our knowledge, we will take immediate action to delete that information and close the relevant account. Parents or guardians who become aware that their child has registered on soda77 are urged to contact us immediately.

9Changes to the Privacy Policy

Soda77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. Any significant changes will be communicated to you via:

  • A clear notice on the soda77.win homepage for at least 7 days before the changes take effect.
  • Email notification to your registered email address for material changes.
  • In-app notifications on the soda77 mobile app if you are using the app.

Continued use of the soda77 platform after the effective date of any Privacy Policy changes constitutes your acceptance of the updated terms. The "Last Updated" date at the top of this document will always reflect the latest version currently in effect.

10Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the soda77 Privacy Officer through the following channels:

  • Live Chat — Available 24/7 directly on the soda77 platform for the fastest response.
  • Privacy Email[email protected] (plain text display only).
  • FAQ Page — Visit our FAQ page for answers to frequently asked questions about privacy.

We are committed to responding to all privacy-related inquiries within 3 business days. For more complex cases such as data access requests, the maximum response time is 14 business days.

Play with Peace of Mind on the Trusted Soda77 Platform

Register an account today and enjoy over 1,000 games with the assurance that your personal data and privacy are fully protected.

Bahasa Melayu