Privacy Policy sohotogel — User Data Protection

Welcome to the Sohotogel Privacy Policy page. This document is the official statement on how the Sohotogel platform — accessible via sohotogel.fun — manages, processes, and protects the personal data of users who register and use our services.

Your privacy is not merely a legal obligation to us — it is a core value that shapes how we build and operate our platform. We believe that user trust is Sohotogel's most valuable asset, and that trust can only be maintained when we are transparent about how we handle your information.

This Privacy Policy applies to all Sohotogel users, including website visitors, registered members, and any party interacting with our platform via the website, mobile app, or any official Sohotogel communication channel. By using the Sohotogel platform, you acknowledge that you have read and understood this policy.

Sohotogel collects various types of information to keep the platform running smoothly, ensure account security, and deliver a relevant experience to every user. The following are the categories of data we collect:

We only collect data that is genuinely necessary for the stated purposes. Sohotogel does not collect sensitive information such as biometric data, health information, or users' political views.

Every piece of information we collect has a clear and legitimate purpose. sohotogel uses your personal data for the following purposes:

• Account management: To create, verify, and manage your user account, including the required identity verification (KYC) process.
• Transaction processing: To securely and efficiently process deposits, withdrawals, and any other financial transactions in your account.
• Platform Security: To detect, investigate, and prevent any fraudulent activity, money laundering, or other security threats that may affect the platform or other users.
• Legal compliance: To fulfil our legal obligations under the PDPA 2010 and applicable anti-money laundering (AML) regulations in Malaysia.
• Service improvement: To analyse aggregated platform usage patterns in order to improve user experience, technical performance, and game offerings.
• Service communications: To send you important information regarding your account, security updates, terms changes, and transaction notifications.
• Customer support: To help you resolve any issues or enquiries submitted to the sohotogel support team.
• Promotional communications: To deliver bonus offers, promotions, and new product information — only to users who have given their consent.

Sohotogel understands that you trust us with your personal information, and we take this responsibility very seriously. We will not share, sell, or disclose your personal data to third parties except in the following limited and controlled circumstances:

• Payment service providers: Required transaction information is shared with approved payment processors such as FPX, TNG eWallet, ShopeePay, and banking institutions to complete your transactions. All such providers are bound by strict confidentiality agreements.
• Game providers: Data required to enable gameplay is shared with approved game software providers, subject to binding data protection agreements.
• Legal authorities: sohotogel will disclose data to government authorities, law enforcement agencies, or regulatory bodies when required to do so by Malaysian law, court order, or AML/KYC compliance requirements.
• Audit & security services: Independent audit firms conducting platform security reviews may need to access certain data within the limited scope defined by professional confidentiality agreements.

When sharing data with authorised third parties, Sohotogel ensures that only the minimum necessary information is shared, and all parties receiving such data are bound by confidentiality and security obligations equivalent to Sohotogel's own standards.

The Sohotogel website uses cookies and similar tracking technologies to enhance your browsing experience and ensure the platform functions properly. Cookies are small text files stored on your device when you visit our website.

Sohotogel uses the following types of cookies:

• Essential cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled without affecting basic platform functionality.
• Performance cookies: Collects information about how you use the platform — pages visited, time spent, errors encountered — to help us improve the user experience.
• Functional cookies: Saves your preferences such as language, display settings, and login information for a more convenient return visit.
• Analytics cookies: Used to understand platform traffic patterns and usage in an aggregated, anonymous manner for continuous improvement purposes.

You can control and manage cookies through your web browser settings. However, disabling essential cookies may affect your ability to log in or use certain features of the Sohotogel platform. We recommend allowing essential cookies for the best experience.

Sohotogel continually invests in robust security infrastructure to ensure your personal data remains protected at all times. The following are the key security measures we have implemented:

• 256-bit SSL encryption: All communications between your device and sohotogel servers are encrypted using the latest TLS protocol, ensuring your data cannot be intercepted during transmission.
• Two-factor authentication (2FA): sohotogel offers two-factor authentication as an additional security layer to protect your account from unauthorised access.
• Continuous threat monitoring: Our systems are monitored 24 hours a day, seven days a week to detect any suspicious activity or intrusion attempts.
• Internal access controls: Only authorised personnel with a legitimate work need may access user data, and every access is logged for audit purposes.
• Secure backups: User data is regularly backed up to a secure, separate location to ensure service continuity under any emergency.
• Regular penetration testing: sohotogel conducts regular security testing by independent cybersecurity experts to identify and address any system vulnerabilities before they can be exploited.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold. Sohotogel is committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact the sohotogel Data Protection team by email at [email protected]. We will process your request within 30 business days of receipt. In complex cases, this period may be extended by up to 60 days with prior notice to you.

Sohotogel retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or for as long as required by applicable Malaysian law. Our general data retention principles are as follows:

• Active account data: For as long as your account is active and you are using Sohotogel's services.
• Data after account closure: sohotogel will retain certain records for the minimum period prescribed by Malaysia's AML laws and financial regulations (typically no less than five years) following account closure.
• Transaction records: All financial transaction records are retained for the minimum period required by Malaysia's financial authorities for audit and compliance purposes.
• Communication logs: Customer support communication records are retained for three years from the date of the last interaction for reference and dispute resolution purposes.
• Cookie data: Session cookies expire automatically when you close your browser, while persistent cookies have varying expiry periods depending on their type and purpose.

Once the retention period expires and data is no longer needed for any legitimate purpose, Sohotogel will securely delete or anonymise it using industry-standard methods.

Sohotogel reserves the right to review and update this Privacy Policy from time to time in line with changes to our business practices, legal requirements, or developments in security technology. Each new version of this Privacy Policy will be published on this page with a clearly indicated latest update date.

For amendments considered significant — such as changes to how we use your data or new rights granted to you — sohotogel will provide clearer notice, either through in-platform notifications or via email to your registered address.

Sohotogel has appointed a Data Protection Officer (DPO) responsible for ensuring the platform's compliance with relevant data protection laws and handling all privacy-related enquiries.

If you have any questions, concerns, or complaints regarding how Sohotogel handles your personal data, or if you wish to exercise any of the rights stated above, please contact us through the following channels:

• Data Protection Email: [email protected]
• Live Chat: Available 24/7 via the platform after login
• Response Time: We are committed to responding to all privacy enquiries within 14 business days

If you are unsatisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the regulatory body responsible under PDPA 2010.