Privacy Policy — SohoSlot

SohoSlot ("we", "us", or "our") operates the online gaming and sports-betting platform available at sohoslot.cam (the "Platform"). We are committed to handling the personal data of every user ("you", "your") with transparency, respect, and care.

This Privacy Policy describes the personal data we collect from users of the SohoSlot Platform — including players based across Malaysia in cities such as Kuala Lumpur, Petaling Jaya, Shah Alam, Johor Bahru, and Penang — and explains how that data is collected, processed, stored, shared, and protected. It also sets out the rights you hold in relation to your personal data and how to exercise them.

By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the data practices described herein, to the extent that such consent forms the legal basis for any given processing activity.

For the purposes of this Privacy Policy, the following terms have the meanings assigned below:

• "Personal Data" — any information that identifies or could reasonably be used to identify a natural person, directly or indirectly.
• "Processing" — any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, or deletion.
• "Data Controller" — the entity that determines the purposes and means of processing personal data, which for this Platform is SohoSlot.
• "Data Processor" — a third party that processes personal data on behalf of SohoSlot under a contractual arrangement.
• "User" / "You" — any natural person who registers an account on, accesses, or interacts with the SohoSlot Platform.
• "KYC" — Know Your Customer — the identity and age verification procedures required by SohoSlot before certain account features are accessible.
• "Cookies" — small text files stored on a user's device to enable Platform functionality, analytics, and session management.
• "PDPA" — Malaysia's Personal Data Protection Act 2010, which governs the processing of personal data of individuals in Malaysia.

SohoSlot collects personal data across several categories depending on how you interact with the Platform. The table below provides an overview of the categories of data we may collect and their primary purpose:

Personal data is collected through the following means:

• Direct provision by you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact support, or respond to a survey or promotion.
• Automated collection: Technical and usage data are collected automatically when you access the Platform via cookies, server logs, and similar tracking technologies described further in Section 8.
• Payment processors and banking partners: Financial data relating to your chosen payment method — such as transaction confirmation from Maybank2u, CIMB Clicks, DuitNow, or FPX — is received from our third-party payment processing partners.
• Identity verification providers: Where KYC verification is conducted through an authorised third-party provider, that provider may share identity verification outcomes and associated data with SohoSlot.
• Publicly available sources: In cases of suspected fraud or money laundering, SohoSlot may cross-reference information against lawfully available public records.

SohoSlot processes personal data only where a valid legal basis exists. The applicable bases are:

• Contractual necessity: Processing required to register your account, deliver gaming services, process deposits and withdrawals, and administer bonuses.
• Legal obligation: Processing required to comply with anti-money-laundering regulations, age verification requirements, and record-keeping obligations under applicable law, including the PDPA and any applicable gaming regulations.
• Legitimate interests: Processing for fraud detection, security monitoring, Platform improvement, and responsible gambling analytics — where these interests do not override your fundamental rights.
• Consent: Where consent is the stated legal basis — for example, for certain marketing communications or optional analytics features — you retain the right to withdraw consent at any time without affecting the lawfulness of prior processing.

SohoSlot uses collected personal data for the following purposes:

• To create, verify, and maintain your SohoSlot account;
• To process deposits and withdrawals via your chosen Malaysian payment method;
• To deliver gaming content and sports betting markets, including live football and EPL fixtures;
• To administer bonuses, promotions, cashback, birthday rewards, and referral incentives;
• To conduct KYC and age verification in compliance with responsible gambling obligations;
• To detect, investigate, and prevent fraud, money laundering, and other prohibited conduct;
• To monitor usage patterns and identify players who may benefit from responsible gambling interventions;
• To respond to support queries, complaints, and dispute resolution requests;
• To comply with legal and regulatory requirements applicable in Malaysia and the Platform's operating jurisdiction;
• To improve Platform performance, user experience, and game discovery features;
• To send transactional communications relevant to your account (e.g., deposit confirmations, withdrawal status updates, security alerts).

SohoSlot does not sell personal data. We share personal data only in the circumstances described below, and only to the extent necessary for the stated purpose:

• Payment processors: Financial data is shared with authorised payment processing partners — including those facilitating Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX transactions — for the purpose of executing and reconciling financial transactions.
• Identity verification providers: Identity and document data is shared with KYC service providers to fulfil age and identity verification obligations.
• Game and content suppliers: Certain usage and session data may be shared with game content providers strictly for the purpose of delivering game content and audit compliance. Game providers do not receive personally identifiable information beyond what is operationally required.
• Regulatory authorities: SohoSlot will disclose personal data to competent authorities — including law enforcement, financial regulators, or gaming regulators — where required by law, court order, or lawful request.
• Anti-fraud and security services: Technical and transaction data may be shared with third-party fraud-detection services to protect the Platform and its users.
• Professional advisers: Data may be shared with auditors, legal counsel, or insurers where required in the normal course of business operations, subject to confidentiality obligations.

All third-party recipients of personal data are subject to contractual data-protection obligations and are prohibited from using your data for purposes beyond the specific service they are engaged to provide.

SohoSlot uses cookies and similar technologies to operate the Platform effectively, maintain session security, and gather analytics data. The categories of cookies used are as follows:

• Essential cookies: Required for the Platform to function. These include session tokens, authentication cookies, and CSRF-protection tokens. The Platform cannot operate without these cookies and no opt-out is available.
• Functional cookies: Store user preferences such as language settings and preferred layout options to personalise your experience across sessions.
• Analytics cookies: Collect aggregated usage information — including pages visited, time on page, and interaction events — to help SohoSlot understand how users navigate the Platform and identify areas for improvement. Analytics data is processed at an aggregate level and does not individually identify users by default.
• Security cookies: Support fraud detection and account integrity checks by recording anomalous device behaviour or login patterns.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent access to the Platform but may affect certain features. SohoSlot does not use third-party advertising cookies or cross-site tracking cookies for retargeting purposes.

SohoSlot retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention principles apply:

• Active accounts: Personal data is retained for the duration of the account relationship.
• Closed accounts: Following account closure, identity, financial, and transaction records are retained for a minimum of five (5) years in compliance with anti-money-laundering record-keeping obligations under Malaysian law and the Platform's operating jurisdiction.
• Support and communication records: Live chat transcripts and email correspondence are retained for a minimum of two (2) years for dispute resolution, training, and regulatory purposes.
• Technical and usage data: Aggregated or anonymised usage analytics data may be retained indefinitely for Platform improvement purposes, as this data no longer constitutes personal data once appropriately anonymised.

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data subject's identity.

SohoSlot implements technical and organisational security measures proportionate to the sensitivity of the data held and the risks of its processing. Measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive stored data, including password hashes and financial identifiers;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular vulnerability assessments and security testing of Platform infrastructure;
• Secure data centre hosting with physical access controls and environmental monitoring;
• Incident response procedures to identify, contain, and notify affected parties in the event of a confirmed data breach, in accordance with applicable legal notification requirements.

While SohoSlot takes all reasonable steps to protect your data, no transmission over the internet or electronic storage system is entirely immune from risk. You play a role in account security by using a strong, unique password and not sharing your login credentials with others.

Subject to applicable law, including the Personal Data Protection Act 2010 (Malaysia) and the data protection frameworks of the Platform's operating jurisdiction, you hold the following rights in relation to your personal data:

To exercise any of the above rights, submit a written request to SohoSlot via the live chat function or by email. SohoSlot will respond within the timeframe required by applicable law — ordinarily within 30 days — and may request identity verification before actioning a request. Note that certain rights are subject to limitations where data must be retained for legal compliance or fraud-prevention purposes.

SohoSlot may process or store personal data in jurisdictions outside Malaysia. Where personal data is transferred internationally, SohoSlot ensures that appropriate safeguards are in place, which may include:

• Transferring to countries or territories determined to provide an adequate level of data protection;
• Implementing contractual data-protection clauses with data recipients that impose obligations equivalent to those applicable under Malaysian law;
• Applying additional technical safeguards — such as encryption — for data transmitted cross-border.

By using the Platform, you acknowledge that your personal data may be transferred and processed internationally in accordance with this section and the broader terms of this Privacy Policy.

The SohoSlot Platform is strictly intended for adults aged 21 years and above. SohoSlot does not knowingly collect, process, or retain personal data relating to individuals under the age of 21.

Where SohoSlot becomes aware that personal data has been collected from a person under the age of 21 — whether through a false declaration during registration or otherwise — that account will be immediately suspended, all associated data will be reviewed, and any funds held in the account will be handled in accordance with SohoSlot's account termination procedures and applicable legal requirements.

If you believe that a minor has registered an account with SohoSlot, please report this to us via live chat or at [email protected] (plain text — not a clickable link) so that we may take prompt action.

SohoSlot reserves the right to revise this Privacy Policy at any time. Material changes — for example, a new category of data collection, a new category of third-party sharing, or a change in the legal basis for processing — will be communicated to registered users via the registered email address and/or a prominent notice on the Platform prior to the change taking effect.

Minor amendments, such as corrections to formatting or clarification of existing practices without substantive change, may be made without advance notice. The "Effective date" at the top of this document will be updated to reflect the date of the most recent revision.

Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not accept the revised terms, you should cease using the Platform and may request account closure in accordance with the Terms and Conditions.

If you have questions about this Privacy Policy, wish to exercise a data right, or want to raise a concern about how SohoSlot has handled your personal data, please contact us through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the Platform

SohoSlot will acknowledge all data-related requests within 5 business days and aim to resolve them within 30 calendar days. For complex requests, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it.

If you are not satisfied with our response, or if you believe that SohoSlot is processing your personal data in a manner inconsistent with applicable law, you have the right to lodge a complaint with the competent data protection supervisory authority in Malaysia or the jurisdiction applicable to you.