Official Document

Privacy Policy Sobat500 – Malaysia Player Data Protection

Sobat500 values the privacy of every player. This document clearly explains how we collect, use and protect your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). No complex legal language — written in plain, easy-to-understand English.

Updated: 1 January 2026 Bahasa Malaysia PDPA 2010 Compliant
Sobat500's Six Privacy Promises to You

These are the principles that guide how Sobat500 handles your data — not merely to comply with the law, but out of genuine respect for your privacy.

Security
256-bit SSL Encryption on All Data

Every piece of information you send to Sobat500 — from your login details to Touch 'n Go or DuitNow deposit transactions — is protected with 256-bit SSL encryption. This is the same security standard used by Malaysia's leading banks, including Maybank and CIMB.

SSL 256-bitBank-Grade
Data Usage
No Data Sales to Third Parties

Sobat500 does not sell, rent or share your personal information with any third party for marketing purposes without your explicit consent. Your data is used solely to manage your account, process transactions and improve your experience on our platform.

No Data SalesFull Control
Legal Compliance
Fully Compliant with Malaysia's PDPA 2010

All of Sobat500's data handling practices comply with Malaysia's Personal Data Protection Act 2010. You have the right to access, correct and request deletion of your personal data at any time — and we are committed to making that process straightforward.

PDPA 2010Malaysia
Transaction Privacy
Your Betting History Is Private

Your betting history, deposit amounts via Touch 'n Go or FPX, and your winning records on Sobat500 are confidential. This information is not shared with any party unless required by Malaysian law or necessary to prevent fraud and money laundering.

Confidential DataAML Compliant
Your Controls
You Control Notifications & Communications

You can choose to opt in or out of marketing communications from Sobat500 — including promotional emails, football odds boost notifications, or live casino promotional alerts — directly from your account settings, with no need to contact support.

Opt-in / Opt-outFreedom of Choice
Transparency
Clear Policy, No Hidden Language

Sobat500 believes players have the right to know exactly what happens with their data. This Privacy Policy is written in plain, easy-to-understand language — not lengthy, confusing legal jargon. If any section is unclear, reach out to us and we'll be happy to explain.

MalayTransparent

Welcome to the Privacy Policy Sobat500. This document outlines our commitment to protecting your personal information as a player on our platform. We understand that sharing personal information with any online platform requires trust — and we take that trust seriously.

By using the Sobat500 platform — whether via the website or mobile app — you agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account if needed.

1
Information We Collect
Types of data Sobat500 collects when you use our platform

Sobat500 only collects information necessary to provide you with a safe, efficient and personalised service. We do not collect data beyond what is required for the stated purposes.

1.1 Information You Provide Directly

  • Registration information: full name, Malaysian phone number, email address and password
  • Identity verification information (KYC): a copy of MyKad or Malaysian passport submitted for account verification purposes
  • Payment information: e-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay) or bank account details for processing deposits and withdrawals — we do not store full credit/debit card numbers
  • Support communications: the content of live chat messages and emails you send to the Sobat500 support team

1.2 Information Collected Automatically

  • Platform usage data: pages visited, categories browsed, matches viewed and in-app actions
  • Device data: device type, operating system, app version, and unique device identifier
  • Network data: IP address, internet connection type, and internet service provider (ISP)
  • Transaction data: records of all deposits (including payment method — DuitNow, FPX Maybank2u, CIMB Clicks), withdrawals and betting activity on the platform
  • Cookies and browser data: as described in Section 5 below

Sobat500 does not continuously collect your precise geolocation. IP addresses are used solely for security verification and not to track your physical movements.

You Register
Encrypted Data
Secure Servers
Restricted Access
You Are Protected
2
How We Use Your Data
How Sobat500 uses your personal information

Sobat500 uses collected information solely for legitimate and necessary purposes to operate a safe and responsible betting platform for Malaysian players.

2.1 Primary Purposes of Use

  • Account management: creating, verifying, and managing your Sobat500 account
  • Transaction processing: processing deposits via Touch 'n Go, DuitNow, GrabPay or FPX and withdrawals to your Malaysian e-wallet or bank account
  • KYC Verification: meeting the requirements of Malaysia's Anti-Money Laundering Act (AMLA) by verifying player identity
  • Platform security: detecting and preventing fraud, unauthorised access and system misuse
  • Customer support: responding to enquiries, resolving disputes and providing technical assistance
  • Responsible gambling: monitoring usage patterns to identify players who may need assistance or self-exclusion limits

2.2 Secondary Purposes for Data Use (With Your Consent)

  • Sending relevant promotions — EPL football odds boosts, Live Casino bonuses, lottery offers
  • Notify you about new platform features, such as the latest virtual sports categories
  • Conducting customer satisfaction surveys to improve our services
  • Aggregate statistical analysis (anonymised data) to understand platform usage trends

You can opt out of marketing communications at any time by updating your notification preferences in your Sobat500 account settings or by contacting our support team. This will not affect your core account services.

3
Data Sharing & Disclosure
When and with whom Sobat500 may share your information

Sobat500 does not sell your personal information to any third party for commercial purposes. However, there are specific circumstances where sharing information is necessary or required by law.

3.1 Authorised Third-Party Service Providers

Provider Category Purpose Data Shared
Payment Providers (TnG, GrabPay, DuitNow, FPX) Processing deposits and withdrawals Transaction information only
KYC / Identity Verification Provider Verifying player identity Copy of submitted identity document
Cloud Service Provider Data storage and server operations Data encrypted — no access without authorisation
Fraud Detection Provider Detecting suspicious activity Session and transaction data in encrypted form

3.2 Legally Required Disclosures

Sobat500 may disclose your personal information to Malaysian authorities — including Bank Negara Malaysia, the police, courts, or other regulatory bodies — when required by a court order, search warrant, or other valid legal obligation. In such cases, Sobat500 will disclose only the minimum information required by law.

All third-party providers working with Sobat500 are bound by data processing agreements that require them to protect your information to the same or higher standard that we apply ourselves.

4
Data Security
The technical and operational measures Sobat500 uses to protect your data

Sobat500 continuously invests in security infrastructure to ensure your personal and financial data is protected at every stage — from collection through storage to deletion.

4.1 Technical Security Measures

  • 256-bit SSL Encryption: all communications between your device and Sobat500's servers are fully encrypted
  • Two-Factor Authentication (2FA): an additional security layer for account access
  • Real-time monitoring: an intrusion detection system operating 24 hours a day to identify suspicious activity
  • Hashed password storage: your password is never stored in plain text
  • Regular security audits: penetration testing and security audits are conducted periodically by independent parties
  • Distributed data backup: data is stored across multiple data centres to ensure service continuity

4.2 Operational Security Measures

  • Access to players' personal data is restricted to Sobat500 staff who require it to carry out their duties only
  • All staff with access to sensitive data undergo privacy and security training
  • Access logs are recorded and reviewed regularly to detect any unusual access activity

Your Responsibilities: Your account security also depends on your own actions. Do not share your password, avoid reusing it across other platforms, and enable 2FA in your Sobat500 account settings. Contact support immediately if you suspect any unauthorised access to your account.

5
Cookies & Tracking Technologies
How Sobat500 uses cookies and browser data

Sobat500 uses cookies and similar tracking technologies to keep the platform running properly and to improve your experience. Cookies are small text files stored on your device when you visit our website or use our app.

5.1 Types of Cookies Used

Cookie Type Purpose Duration Status
Essential Cookies Login sessions, account security, transaction processing Session / 30 days Mandatory
Functional Cookies Remember language preference, display format and personal settings 1 year Mandatory
Analytics Cookies Understanding how players use the platform to drive improvements 2 years Optional
Performance Cookies Tracking page load times and technical errors 90 days Optional
Marketing Cookies Displaying relevant promotions based on your interests 30 days Rejectable

5.2 Cookie Controls

You can manage your cookie settings through your browser at any time. Disabling certain cookies may affect platform functionality — for example, disabling essential cookies will prevent you from staying logged in to your Sobat500 account. For the mobile app, cookie settings can be managed through the app's privacy settings on your device.

6
Your Rights Under the PDPA
Data protection rights you hold as a Sobat500 player in Malaysia

As a Sobat500 player who is a Malaysian citizen or resident, you have the following rights under the Personal Data Protection Act 2010 (PDPA). Sobat500 is committed to respecting and facilitating the exercise of these rights.

Right to Access

Request a copy of all personal data we hold about you.

Right to Rectification

Request corrections to any information that is inaccurate or out of date.

Right to Erasure

Request deletion of your data, subject to legal retention requirements.

Right to Object

Object to the use of your data for direct marketing or profiling.

Data Portability

Request your data in a readable and portable format.

Right to Restriction

Request that we restrict the processing of your data under certain circumstances.

6.1 How to Submit a Privacy Rights Request

To submit any of the privacy rights requests above, contact the Sobat500 privacy team by email at support@sobat500.asia with the subject line "Privacy Rights Request" and state the type of request along with your account number (if applicable). Sobat500 will respond within 14 working days from the date the request is received.

Some erasure rights may not be fully exercisable where there is a legal obligation to retain certain records — for example, financial transaction records required under the Anti-Money Laundering Act. In such cases, we will inform you in detail about what can and cannot be deleted, along with the reasons.

7
Data Retention & Deletion
How long Sobat500 retains your data and when it is deleted

Sobat500 does not retain your personal data for longer than is necessary for the original purpose of collection or to fulfil applicable legal requirements.

7.1 Data Retention Period

Data Type Retention Period Legal Basis
Active account information For the duration of the active account Contract operations
Financial transaction records 7 years after transaction Malaysia AMLA, PDPA
KYC and identity records 7 years after account closure Regulatory requirements
Support chat logs 3 years Dispute resolution
Analytics cookies data 2 years Service improvement
Security logs 1 year Fraud prevention

7.2 Deletion Process

Once the retention period expires or upon receipt of a valid erasure request, Sobat500 will delete or anonymise your data using methods that ensure it cannot be recovered. For data in physical format (where applicable), we use secure destruction methods.

8
Privacy Policy Changes
How Sobat500 notifies you of changes to this document

Sobat500 may update this Privacy Policy from time to time to reflect changes in our practices, Malaysian legal requirements or the services we offer. When material changes are made — meaning changes that significantly affect how we handle your data — we will notify you via:

  • Email to the address registered to your Sobat500 account
  • In-app notification on Sobat500 upon your next login
  • Update the "Last updated" date at the top of this page

Changes take effect 7 days after notice of material amendments is sent. Continued use of the platform after the effective date constitutes acceptance of the updated policy. If you do not agree with the changes, you may request account closure before the effective date.

9
Children's Data
Sobat500's policy on collecting data from individuals under the age of majority

Sobat500 is a platform designed exclusively for adults aged 18 and above. We does not knowingly collect any personal information from individuals under the age of 18.

If we discover that information from someone under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that information and close the account in question. Parents or guardians who believe their child has registered a Sobat500 account are urged to contact us immediately at support@sobat500.asia so we can act promptly.

If you suspect someone under the age of 18 is using the Sobat500 platform, please report it to us immediately. We take our responsibility seriously in ensuring the platform is not accessed by underage individuals.

10
Contact Us
How to contact Sobat500 for privacy-related enquiries

If you have any questions, concerns or requests regarding this Privacy Policy or how Sobat500 handles your personal data, we encourage you to reach out to us directly. We are committed to providing thorough and helpful responses.

Privacy Email
support@sobat500.asia
Subject: "Privacy Enquiry"
Response within 14 working days
Live Chat
Available 24/7 in-app
For general privacy enquiries
Response time under 2 minutes
Governing Law
This Privacy Policy is governed by Personal Data Protection Act 2010 (PDPA) Malaysia. Any privacy dispute that cannot be resolved directly with Sobat500 may be referred to Malaysia Personal Data Protection Department.
Privacy FAQs at Sobat500

No. Sobat500 does not store your full bank card or e-wallet account number. When you make a deposit via Touch 'n Go, DuitNow, GrabPay, or FPX, the transaction is processed through a PCI-DSS certified third-party payment gateway. Sobat500 receives only the transaction confirmation — not your full payment account details. This means your sensitive financial information never resides on Sobat500's servers.

Yes, you may submit a data deletion request by emailing support@sobat500.asia. Please note, however, that not all data can be deleted immediately — financial transaction records must be retained for 7 years under Malaysia's Anti-Money Laundering Act (AMLA), a legal requirement that cannot be waived. Data not subject to any legal retention requirement will be deleted within 30 days of your request being confirmed. We will inform you in detail which data has been deleted and which must be retained.

Sobat500 does not share personally identifiable information — such as names, phone numbers, or email addresses — with third-party advertising platforms. We use analytics cookies (which you can opt out of) to understand platform usage in aggregate and anonymous form. This aggregated data does not contain any information that could identify you individually. To manage your cookie preferences, use the privacy settings in your browser or app.

Live chat and email records with Sobat500 customer support are retained for 3 years from the date of interaction. This allows us to reference previous cases should an issue recur and to ensure consistency in the service provided. After 3 years, conversation records are deleted unless they are related to an ongoing dispute or required for legal purposes.

In the event of any change in ownership, merger or acquisition involving Sobat500, you will be notified via email and in-app notification at least 30 days before any material changes take effect. Your data will only be transferred to the acquiring entity if that entity commits to upholding this Privacy Policy or one that offers equivalent protection. You will have the option to close your account and request data deletion prior to the transfer if you do not agree to the new terms.

Sobat500 uses 256-bit SSL encryption for all communications between your app or browser and our servers — meaning your data stays encrypted even when you're on public Wi-Fi at a café, airport, or shopping mall. That said, we still recommend exercising caution on public networks and avoiding large financial transactions over unsecured connections. Enable 2FA on your Sobat500 account for an extra layer of protection that works independently of your network connection.

Your Privacy is Protected. Ready to Play?

Sobat500 is built on trust — from bank-grade data protection to a clear and honest privacy policy. Create a free account today and enjoy a safe, fair, and responsible betting experience alongside more than 500,000 Malaysian players.

SSL 256-bit PDPA 2010 Compliant No Data Sales 24/7 BM Support
Bahasa Melayu