🔒 Privacy Policy – Sobat500

Privacy Policy Sobat500 – Our Commitment to Protecting Your Data

Your privacy is not merely a legal obligation to Sobat500 – it is a moral responsibility we take seriously. This document transparently explains how we collect, use, store, and protect the personal data of every member on our online casino platform in Malaysia.

Updated: January 2026

🛡️ Sobat500 Data Protection Summary

Encryption 256-bit SSL for all data and transactions
Your Data not sold to any third parties
Internal access restricted to authorised personnel only
You have the right access, amend & delete your data
Options unsubscribe marketing communications at any time
256-bitSSL Encryption Standards
0Data Sold to Third Parties
24/7Security Monitoring
72 hoursData Request Response

Why Malaysian Players Can Trust Sobat500 with Their Data

Six core data protection principles that make Sobat500 a safe and trustworthy online casino platform for Malaysian players.

Top-Level Encryption

All data transmitted between your browser and Sobat500's servers is protected by 256-bit SSL encryption – the same standard used by Malaysia's leading banking institutions. Your personal information and financial transactions are never exposed during transmission.

Secure Data Storage

Sobat500 members' personal data is stored on servers protected by multiple layers of security, including firewalls, intrusion detection systems, and strict access controls. Data backups are performed regularly to ensure continuity of service.

Restricted Staff Access

Only Sobat500 staff with a legitimate operational need are permitted to access members' personal data. All access is logged and audited on a regular basis. No staff member may access member data without a clear, approved business justification.

Your Data, Your Control

As a Sobat500 member, you have full rights to access the personal data we hold about you, request corrections to inaccurate information, and apply for account and data deletion. All such requests are processed within 72 hours.

Optional Marketing Communications

Sobat500 only sends marketing communications to members who have given their consent. You can unsubscribe from promotional notifications at any time via your account settings or the unsubscribe link included in every email we send you.

Full Transparency on Data Usage

Sobat500 is committed to clearly explaining why we collect each type of data, how it is used, and how long it is retained. There is no undisclosed data collection — what you read in this Privacy Policy is exactly what happens in practice.

1Introduction

Sobat500 ("we", "our platform") takes the privacy of every member seriously. This Privacy Policy explains our practices for collecting and handling personal data for anyone who uses the Sobat500 online casino platform at sobat500.site.

This policy applies to all registered members, website visitors, and anyone who interacts with Sobat500's services — including through our web platform, email communications, and customer support channels. By registering an account or continuing to use the Sobat500 platform, you consent to the practices described in this document.

This Privacy Policy is to be read together with Terms & Conditions Sobat500 and form the entire agreement governing your use of our platform. Should any conflict arise between these documents regarding privacy, this Privacy Policy shall take precedence.

Sobat500's Core Commitments: We do not sell, rent, or trade member personal data to any third party for their own marketing purposes. Your data is your data — not a business asset we sell to advertisers.

2Personal Data We Collect

Sobat500 collects personal data through various channels and for a range of purposes. Below is a breakdown of the types of data we collect:

2.1 Data You Provide Directly
  • Registration information: Full name, mobile phone number, email address, date of birth, and account password
  • Identity verification (KYC) information: MyKad or passport copy, proof of residential address
  • Payment information: E-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), bank account numbers for DuitNow, or FPX-related details for Maybank2u and CIMB Clicks
  • Communications with us: Live chat conversation content, support emails, and feedback you submit to the Sobat500 team
2.2 Automatically Collected Data
  • Platform usage data: Games played, total bets, play duration, transaction history, and account activity
  • Technical data: IP address, web browser type, operating system, device type, and screen resolution
  • Location data: Approximate location based on IP address (country and region only – not precise GPS location)
  • Cookie data: Session cookies, preference cookies, and analytics cookies (see Section 8 for details)
2.3 Data from Third Parties

In certain cases, Sobat500 may receive your personal data from trusted third parties, including identity verification service providers, payment gateway providers that process your transactions, and KYC service providers that assist us in verifying member identities.

2.4 Summary of Data Types and Purposes
Data Type Primary Purpose Legal Basis
Name, email address, phone number Account registration & communication Contract performance
MyKad / passport Identity verification (KYC) Legal obligations
Payment information Processing deposits & withdrawals Contract performance
Gaming history & transactions Audit, security & responsible gaming Legitimate interest / legal obligation
IP address & technical data Security & fraud prevention Legitimate interests
Optional cookie data Marketing & experience personalisation Consent

3How We Use Your Personal Data

Sobat500 uses the personal data collected solely for the following purposes:

3.1 Service Provision
  • Creating and managing your member account on Sobat500
  • Processing deposits and withdrawals in Malaysian Ringgit (RM) via your chosen Malaysian payment method
  • Providing access to the games catalogue and live casino services
  • Managing bonuses, promotions, and VIP loyalty programmes you have enrolled in
  • Providing 24/7 customer support in Bahasa Malaysia
3.2 Security and Fraud Prevention
  • Verifying member identity through the KYC process to prevent fraud and money laundering
  • Monitoring account activity to identify suspicious or unusual patterns
  • Protecting member accounts from unauthorised access and hacking attempts
  • Complying with legal reporting requirements related to financial transactions
3.3 Responsible Gaming

Sobat500 uses members' gameplay history to monitor playing patterns and identify signs of problematic gambling behaviour. This enables our team to proactively reach out to members who may need support, in line with our commitment to responsible gaming.

3.4 Platform Improvements

Aggregated, anonymised usage data is used to understand how members use the Sobat500 platform, which games are most popular, and where we can improve the user experience. This data contains no information that could identify any specific individual.

3.5 Communications and Marketing

With your consent, Sobat500 uses your email address and phone number to send promotional information, new bonus notifications, and platform updates. You may withdraw this consent at any time.

Important: Sobat500 never uses members' personal data to make automated decisions that significantly affect your rights without human involvement. Every material decision relating to your account is reviewed by a qualified member of staff.

4Legal Basis for Data Processing

Sobat500 processes your personal data on the following valid legal bases:

  • Contract Performance: Processing required to deliver the Sobat500 services you agreed to upon account registration — including transaction processing, account management, and game provision
  • Legal Obligation: Processing required to comply with applicable Malaysian law, including KYC requirements, transaction reporting, and anti-money laundering obligations
  • Legitimate Interest: Processing for the purposes of platform security, fraud prevention, service improvement, and responsible gaming monitoring – where these interests do not override your privacy rights
  • Consent: Processing for marketing communications and non-essential cookies – where you have given consent that may be withdrawn at any time

5Data Sharing with Third Parties

Sobat500 does not sell or rent member personal data to any third party. However, we may share data in the following limited circumstances:

5.1 Service Providers

We work with trusted third-party service providers who help us operate the platform – including payment gateway providers for processing MYR transactions via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, and FPX; KYC and identity verification service providers; gaming software providers; and server infrastructure and cybersecurity providers. All providers are bound by strict data confidentiality agreements and may only use your data for purposes we have specified.

5.2 Legal Requirements

Sobat500 may disclose member personal data to Malaysian government authorities or law enforcement when required to do so by applicable law, a valid court order, or a legal investigation relating to unlawful activity.

5.3 Business Transfer

In the event of a merger, acquisition, or sale of Sobat500's assets, members' personal data may be transferred to the receiving entity. In such circumstances, members will be notified in advance and the continuing Privacy Policy will ensure the same level of protection is maintained.

⚠️ Sobat500 never shares members' personal data with third-party advertisers for targeted advertising purposes, marketing companies unrelated to our platform's operations, or any party without a legitimate business need connected to Sobat500's services.

6Data Security Measures

Sobat500 implements a range of technical and organisational security measures to protect members' personal data from unauthorised access, loss, or disclosure:

6.1 Technical Security
  • Encryption in transit: All communications between your browser and Sobat500's servers are encrypted using TLS 1.3 with a 256-bit SSL certificate
  • Storage encryption: Sensitive data such as payment information and KYC documents are stored in encrypted format using AES-256 standards
  • Firewall and monitoring: 24/7 security monitoring with automated intrusion detection and rapid incident response
  • Access controls: Multi-factor authentication for internal staff access, governed by a strict minimum-privilege principle
  • Regular security testing: Penetration testing and security audits are conducted regularly by independent cybersecurity specialists
6.2 Organisational Security
  • Mandatory data security training for all Sobat500 staff with access to member data
  • Clean desk and locked screen policy for staff handling sensitive data
  • Documented incident response procedures to manage any data breaches swiftly and effectively
  • Privacy risk assessments are conducted before introducing new products, services, or processes
6.3 Breach Notification Procedure

In the event of a data breach that may affect members' personal data, Sobat500 is committed to notifying affected members within 72 hours of becoming aware of the breach. The notification will include a description of the breach, the data involved, the steps we have taken, and actions you can take to protect yourself.

7Data Retention Period

Sobat500 retains your personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required under applicable Malaysian law:

  • Active account data: Retained for the duration of your active membership at Sobat500
  • Financial transaction records: Retained for a minimum of 7 years in accordance with legal requirements relating to financial reporting and anti-money laundering
  • KYC documents: Retained for the duration of active membership plus 5 years after account closure
  • Support communication logs: Retained for 2 years from the date of last communication
  • Non-essential cookie data: Deleted in accordance with the set cookie expiry period (typically 30 days to 1 year depending on the cookie type)
  • Closed accounts: Core data is retained for 5 years after account closure for legal compliance purposes, after which it is permanently deleted or anonymised

Note: A longer retention period may be required if your data is related to ongoing legal disputes, regulatory investigations, or specific legal compliance requirements. In such situations, we will notify you where it is appropriate and permissible to do so.

8Cookies & Tracking Technologies

Sobat500 uses cookies and similar tracking technologies to enhance your experience on our platform and ensure it functions correctly. The following are the types of cookies we use:

8.1 Strictly Necessary Cookies (Required)

These cookies are essential for the Sobat500 platform to function properly and cannot be disabled. They include login session authentication cookies, security cookies to prevent CSRF attacks, and cookies that store your language preferences and basic settings. These cookies do not store any personally identifiable information.

8.2 Analytical Cookies (Optional)

These cookies help us understand how members use the Sobat500 platform — which pages are visited, how long is spent on them, and where users encounter issues. This data is used in aggregated form and does not identify individuals. You may opt out of analytics cookies through the cookie settings on your first visit.

8.3 Functional Cookies (Optional)

Functional cookies store your personal preferences such as favourite games, display settings, and communication choices. This allows Sobat500 to deliver a more personalised experience. These cookies can be disabled without affecting the core functionality of the platform.

8.4 Managing Your Cookie Preferences

You can manage or delete cookies at any time through your web browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the Sobat500 platform. For guidance on managing cookies in popular browsers, please refer to your browser's help documentation.

9Your Rights as a Sobat500 Member

As a Sobat500 member, you have the following rights regarding your personal data. To exercise any of these rights, please contact our support team at support@sobat500.site:

9.1 Right of Access

You have the right to obtain a copy of the personal data we hold about you. Access requests will be processed within 72 hours and the information will be sent to your registered email address in a readable format.

9.2 Right to Rectification

If the personal data we hold about you is inaccurate or out of date, you have the right to request a correction or update. Simple changes such as your phone number or email address can be made directly through your account settings.

9.3 Right to Erasure

You may request the deletion of your personal data in certain circumstances – for example, when the data is no longer needed for its original purpose or when you withdraw your consent. Please note that some data may not be eligible for deletion if its retention is required by law.

9.4 Right to Object

You may object to the processing of your personal data for specific purposes, including direct marketing. If you object to direct marketing, we will immediately cease using your data for that purpose.

9.5 Right to Data Portability

You may request the personal data you have provided to us in a structured, commonly used, and machine-readable format. This makes it easy for you to transfer your data to another service should you choose to do so.

⚠️ To protect your privacy, all data rights requests will require identity verification beforehand. We will not disclose personal data to any individual who cannot verify their identity as the legitimate account holder.

10Children's Data

Sobat500 does not provide services to individuals under the age of 18 and does not knowingly collect personal data from minors. Our platform is intended solely for adults aged 18 and above.

If we discover that we have collected personal data from someone under the age of 18, we will take immediate steps to delete that data and close the account in question. If you believe a minor has registered an account on Sobat500, please contact our support team immediately at support@sobat500.site so we can take the appropriate action.

Parental Responsibility: We encourage parents and guardians to monitor their children's internet usage and ensure they do not access online gambling platforms. If you suspect a minor has accessed Sobat500, please contact us immediately.

11Changes to This Privacy Policy

Sobat500 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, the technologies we use, or applicable legal requirements.

For material changes to how we process your personal data, we will notify you via your registered email at least 14 days before the changes take effect. Minor changes that do not significantly affect your privacy rights may be updated without a separate notice, with the revised date reflected at the top of this document.

Your continued use of the Sobat500 platform after the effective date of any amendment to this Privacy Policy constitutes your acceptance of those changes. The latest version of this Privacy Policy is always available on this page for your reference.

12Contact Us About Data Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how Sobat500 handles your personal data, please reach out to us through the following channels:

  • Privacy email: support@sobat500.site – please include "Data Privacy Enquiry" in the email subject line
  • Live chat: Available 24/7 within the Sobat500 platform – connect directly with our support team in Bahasa Malaysia
  • Response time: We aim to respond to all privacy-related enquiries within 72 working hours

We welcome all feedback and privacy-related enquiries. Our trained team is ready to help you understand your privacy rights and how to exercise them within the Sobat500 platform.

Our Commitment: Sobat500 takes every privacy complaint seriously. If you are not satisfied with our response to your privacy concern, you have the right to contact the relevant data protection authority in Malaysia for further guidance or assistance.

Your Privacy Rights at Sobat500

As a Sobat500 member, you have full control over your personal data. Below is a summary of the rights you can exercise at any time.

Right to Know

Request a copy of all personal data Sobat500 holds about you. We will send a full report to your registered email within 72 hours of the request.

Right to Rectification

If any of your data is inaccurate or out of date, you may request a correction. Basic information can be updated directly in your account settings without needing to contact support.

Right to Erasure

In certain circumstances, you may request the deletion of your personal data. Such requests will be assessed in accordance with our legal obligations and legitimate operational requirements.

Right to Object

You may object to the use of your data for direct marketing or processing based on our legitimate interests. Objections to marketing will be actioned immediately.

Data Portability Rights

Receive your personal data in a structured, machine-readable format for transfer to another platform. This gives you full control over your data history.

Right to Unsubscribe

Withdraw your marketing consent at any time through your account settings or the link in any email we send. Unsubscribe requests are processed within 48 business hours of submission.

FAQ – Sobat500 Privacy Policy

Answers to the questions Malaysian players ask most about data privacy and security at Sobat500.

No. Sobat500 does not share your payment information — including details for Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, or FPX — with any third party, except for the payment gateway provider that technically processes your transaction. These payment gateway providers are bound by strict confidentiality agreements and PCI DSS security standards. They receive only the information necessary to process your transaction and are not permitted to use it for any other purpose.

To request a copy of your personal data, send an email to support@sobat500.site with the subject line "Personal Data Access Request". Include your full name, registered phone number, and account ID in the email. We will verify your identity before processing the request. Once verified, a full data report will be sent to your registered email within 72 hours. The report will cover all personal data we hold about you at the time the request is made. This service is free of charge for the first request within any 12-month period.

When you close your Sobat500 account, most of your personal data will be deleted or anonymised. However, certain data must be retained for specific periods in accordance with Malaysian legal requirements. Financial transaction records, for example, must be kept for a minimum of 7 years under laws relating to finance and anti-money laundering. KYC documents are retained for 5 years after account closure. Once the mandatory retention period has expired, all remaining data will be permanently deleted or fully anonymised so that it can no longer be linked to you.

Sobat500 only sends promotional communications to members who have given their consent at registration or through their account communication settings. We do not use your data for advertising on external platforms such as social media or third-party websites. All marketing communications we send are directly related to Sobat500's services – including new bonuses, active promotions, and platform updates. If you wish to stop receiving marketing communications, you may do so at any time through the notification settings in your account or via the unsubscribe link in any email we send you.

Sobat500 has a comprehensive incident response procedure to address any data breaches. In the event of a breach that may affect your personal data, we are committed to notifying you within 72 hours of becoming aware of the incident. The notification will be sent to your registered email address and will include: a description of what occurred, the type of data involved, the steps we have taken to contain the damage, actions you can take to protect yourself, and contact details for further enquiries. We will also report to the relevant authorities where required by law. The security of member data is our absolute priority.

Play with Peace of Mind at Sobat500 – Your Data, Safe with Us

Register for free today and enjoy a safe, fair, and private online casino experience built for Malaysian players.

256-bit SSL Encryption • Data not sold • 24/7 support in Bahasa Malaysia • Min deposit RM20

Bahasa Melayu