This Privacy Policy explains how Sosmedtoto collects, processes, stores, and protects the personal data of its Members and website visitors. We are committed to handling your information responsibly and transparently, in accordance with applicable data protection obligations. Please read this document carefully — it forms part of your agreement with Sosmedtoto.
Before reading the full policy, here is a concise summary of how Sosmedtoto approaches your personal data.
Sosmedtoto collects personal data strictly for the purposes of account management, payment processing, identity verification (KYC), responsible gambling compliance, and platform security. We do not engage in unnecessary or excessive data collection.
Your personal information is never sold, rented, or leased to third parties for marketing or commercial profiling purposes. Data shared with third parties is limited to what is strictly necessary for service delivery — such as payment processors and identity verification providers.
All personal data transmitted to and from the Sosmedtoto platform is protected by 256-bit SSL/TLS encryption. Sensitive data at rest is stored using industry-standard encryption protocols, with access restricted to authorised personnel only.
You have the right to access, correct, restrict, or request deletion of your personal data at any time. Data subject requests are handled by our support team and processed within a reasonable timeframe. For details, see the User Rights section of this policy.
We retain personal data for as long as your Account remains active and for a defined period thereafter, as required by applicable regulatory and anti-money laundering (AML) obligations. Data is securely deleted or anonymised when the retention period expires.
Sosmedtoto uses essential cookies for platform functionality and optional analytics cookies to improve the user experience. We do not deploy third-party advertising or tracking cookies without your explicit consent. Cookie preferences can be managed through your browser settings.
Sosmedtoto ("we", "us", "our") operates the online casino and sports betting platform accessible at sosmedtoto.cam. In the course of providing our services to Members and visitors based principally in Malaysia, we collect and process certain categories of personal data. This Privacy Policy ("Policy") sets out the manner in which we do so.
This Policy applies to all personal data collected through the Sosmedtoto website, mobile interface, support channels, and any other means by which you interact with our platform. It applies to registered Members as well as unregistered visitors to the website.
By accessing the Sosmedtoto platform, registering an Account, or otherwise providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy. If you do not agree to the collection and processing of your data as described herein, you should not use our services.
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
Sosmedtoto collects the following categories of personal data, depending on the nature of your interaction with the platform:
When you create an Account, we collect: full name, date of birth, email address, mobile phone number, preferred username, and residential address. This information is required to establish and maintain your Account and to confirm your eligibility to use the Platform.
To comply with applicable anti-money laundering (AML) and Know Your Customer (KYC) regulations, we collect copies of identity documents (such as MyKad or passport) and proof of address for Malaysian Members. Biometric data embedded in identification documents is processed solely for the purpose of identity verification and is not retained beyond what is strictly necessary.
We collect details of payment methods used for deposits and withdrawals, including e-wallet account identifiers (Touch 'n Go eWallet, Boost, GrabPay), bank account numbers (Maybank, CIMB, Public Bank, RHB, Hong Leong), and transaction records. Full financial account credentials are processed by our payment partners and are not stored on Sosmedtoto servers.
We maintain records of all deposit and withdrawal transactions, wagers placed, game history, and bonus redemption activity associated with your Account. This data is used for account management, dispute resolution, and responsible gambling monitoring purposes.
We automatically collect certain technical data when you access the Platform, including your IP address, browser type and version, operating system, device identifiers, referal URL, pages visited, and session duration. This data is used for platform security, fraud prevention, and analytics purposes.
We retain records of communications between you and our support team, including live chat transcripts, email correspondence, and any feedback or complaints submitted through the Platform.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Registration Data | Name, email, phone, DOB | Account creation & eligibility |
| KYC / Identity | MyKad, passport copy | AML compliance & withdrawal verification |
| Financial Data | e-Wallet IDs, bank account refs | Payment processing |
| Betting / Transaction Data | Wager history, deposits withdrawals | Account records & responsible gambling |
| Technical / Device Data | IP address, browser, device ID | Security & fraud prevention |
| Communications Data | Chat logs, emails | Support & dispute resolution |
Sosmedtoto collects personal data through the following channels:
Sosmedtoto processes your personal data for the following purposes:
We process your personal data on the following legal bases:
Sosmedtoto does not sell, rent, or trade your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and under appropriate contractual safeguards:
Certain service providers engaged by Sosmedtoto may be located in, or process data from, jurisdictions outside Malaysia. Where personal data is transferred internationally, Sosmedtoto ensures that appropriate safeguards are in place, including contractual clauses requiring the recipient to maintain data protection standards consistent with this Policy. We do not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate technical and organisational safeguards.
Sosmedtoto retains personal data for as long as your Account remains active and for a minimum period of five (5) years following Account closure, or for such longer period as may be required under applicable anti-money laundering, regulatory, or tax legislation.
KYC and identity verification documents are retained for the duration of the Member relationship and for a period of at least five years following the last transaction, in compliance with AML obligations. Betting and transaction history is retained for the same period.
Where data is retained solely on the basis of consent (such as marketing preferences), it is deleted within thirty (30) days of consent being withdrawn. Technical data and server logs are typically retained for a period of twelve (12) months and then automatically purged or anonymised.
The Sosmedtoto platform uses cookies and similar technologies to provide and improve the platform experience. The following categories of cookies may be set when you visit the Platform:
You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use the core features of the Sosmedtoto platform. For most browsers, cookie settings are accessible under Privacy or Security preferences.
As a data subject whose personal data is processed by Sosmedtoto, you have the following rights with respect to your personal information. These rights may be subject to certain limitations under applicable law, particularly where processing is required for legal compliance or the prevention of fraud.
You may request a copy of the personal data we hold about you at any time. We will respond to verified access requests within 30 days.
If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated via your Account settings or by contacting support.
You may request deletion of your personal data. This right is subject to mandatory retention obligations under AML and applicable regulatory law, which may override erasure requests.
You may request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
Where processing is based on your consent or on a contract, you may request to receive your personal data in a structured, machine-readable format.
You may object to processing based on legitimate interests at any time. You also have an absolute right to opt out of direct marketing communications at any time.
To exercise any of the above rights, please contact our support team via live chat or by emailing [email protected] (plain text — not a clickable link). We may require you to verify your identity before processing any data rights request.
The Sosmedtoto platform is strictly intended for adults aged21 years and above. We do not knowingly collect, process, or retain personal data of individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete such data and close the associated Account.
If you have reason to believe that a minor has registered an Account on the Sosmedtoto platform, please notify us immediately at the contact details provided in Section 16of this Policy. We take underage access extremely seriously and will act on all such reports without delay.
Sosmedtoto implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
Despite these measures, no data transmission over the internet can be guaranteed to be completely secure. You are responsible for keeping your Account credentials confidential and for notifying us promptly of any suspected unauthorised access to your Account.
The Sosmedtoto platform may contain references to, or integrations with, third-party payment providers and service platforms. This Privacy Policy applies solely to data processed by Sosmedtoto. Any data you provide directly to third-party service providers — such as your bank or e-wallet platform — is governed by that provider's own privacy policy and terms, which are outside our control.
We recommend that you review the privacy policies of all third-party payment providers you use in connection with your Sosmedtoto Account, including those of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and your bank (Maybank, CIMB, Public Bank, RHB, or Hong Leong, as applicable).
Sosmedtoto reserves the right to amend this Privacy Policy at any time. Material changes will be notified to Members via the Platform's announcement section or by email to the registered Account email address. The revised Policy will be effective from the date of publication on this page, as indicated by the "Last Updated" date at the top of this document.
Your continued use of the Sosmedtoto platform following the publication of any amendment to this Policy constitutes your acknowledgement of the updated terms. We encourage you to review this Policy periodically to stay informed of how we handle your personal data.
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by Sosmedtoto, please contact us through the following channels:
For data subject rights requests (access, erasure, rectification, portability), please include your full name, registered email address, and a description of your request. We will respond within 30 calendar days of receiving a verified request. In complex cases, we may extend this period by a further 30 days and will notify you accordingly.
Your personal data is in safe hands at Sosmedtoto. We use bank-grade encryption, strict access controls, and a no-sale-of-data commitment to ensure your privacy is protected at every step. Have more questions? Our24/7 trilingual support team is ready to help. For players aged 21 and above only.
⚠ For players aged 21 and above only. Play responsibly.