Privacy Policy sodeno19 — Our Commitment to Data Protection Malaysian Players

Welcome to sodeno19's Privacy Policy. This document is our written commitment to every member on how the sodeno19 platform handles, processes and protects your personal data. We understand that your trust is our most valuable asset, and that trust begins with transparency about how we manage the information you provide to us.

Sodeno19 is an online entertainment platform offering slots, table games, Live Casino, fishing games, poker and Sports Betting to Malaysian players. To deliver these services safely and efficiently, we need to collect and process certain types of personal data. This Privacy Policy explains in detail what that data is, why we need it, how we use it, and who can access it.

The sodeno19 Privacy Policy is developed in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and leading international data protection principles. We take our legal compliance obligations seriously and continuously invest in the technology and procedures that ensure your data is handled to the highest standards.

Sodeno19 collects your personal data through several means — directly from you during registration and platform use, automatically via tracking technologies as you browse our platform, and occasionally from legitimate third-party sources for identity verification purposes.

Sodeno19 does not collect sensitive personal data such as health information, religious beliefs, political views, or biometric data, except where specifically required for legitimate identity verification purposes and with your explicit consent.

Sodeno19 uses collected personal data solely for the legitimate purposes stated below. We do not process your data for any purpose not listed here without first obtaining your additional consent.

• Creating and managing your sodeno19 member account, including identity verification required under anti-money laundering (AML) laws.
• Processing deposits, withdrawals, and all financial transactions via Malaysian payment methods including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks).
• Provides access to all games and services on the sodeno19 platform, including slots, baccarat, Live Casino, fishing games, poker, and football betting.
• Monitoring account activity to detect and prevent fraud, money laundering, unauthorised access, and violations of our Terms & Conditions.
• Sending essential service communications such as transaction confirmations, security notifications, and policy updates.
• Sending marketing and promotional communications — only where you have given your consent to receive such communications, and you may withdraw that consent at any time.
• Improving the sodeno19 platform based on aggregated, anonymised analysis of usage patterns and user feedback.
• Complying with applicable legal and regulatory obligations in Malaysia, including reporting requirements to the relevant authorities where mandated by law.

Sodeno19 does not sell, rent or disclose your personal data to third parties for marketing or commercial purposes. However, in the course of operating the platform, we may need to share certain data with a limited set of trusted third-party categories as outlined below:

• Payment providers: Transaction information is shared with payment processors (such as DuitNow, FPX, and Malaysia eWallet service providers) as necessary to process your deposits and withdrawals.
• Game providers: Gaming session data that must be shared with game software providers such as Pragmatic Play, PG Soft, Evolution Gaming, and others to ensure games function correctly.
• IT service providers: Server infrastructure and cloud service providers that process data on behalf of sodeno19 under strict data protection agreements.
• Identity verification body: To meet KYC (Know Your Customer) and AML requirements, identity data may be verified through approved third-party verification services.
• Relevant authority: Where required by Malaysian law, court order, or a request from a competent law enforcement agency.

All third parties that receive data from sodeno19 are bound by strict confidentiality and data protection agreements. They are only permitted to use that data for the specific purposes defined and may not process it for any other purpose.

Protecting your personal data is sodeno19's highest technical priority. We invest continuously in the latest cybersecurity infrastructure to keep your information safe from both external and internal threats.

The technical security measures we implement include data encryption in transit using 256-bit SSL/TLS, encryption of data at rest in our databases using banking-grade encryption algorithms, two-factor authentication (2FA) available for all member accounts, round-the-clock security monitoring by a dedicated cybersecurity team, and regular penetration testing conducted by independent security specialists.

• Strict role-based access controls ensure that only authorised sodeno19 personnel are able to access member data.
• All access to sensitive data is logged and monitored to detect any unauthorised access.
• Regular cybersecurity training for all sodeno19 staff to ensure best practices are consistently upheld.
• A comprehensive incident response plan to ensure any data breach is addressed promptly and you are notified in accordance with legal requirements.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure against every cyber threat. You also play an important role in your account's security — use a strong password, enable 2FA, and never share your login credentials with anyone.

Sodeno19 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable Malaysian law. The applicable retention periods are as follows:

Once the retention period expires, data will be securely deleted or permanently anonymised so it can no longer be associated with you. sodeno19's data deletion procedures ensure that no information is recoverable after the deletion process has been completed.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have certain rights regarding your personal data held by sodeno19. We fully respect and facilitate the exercise of these rights.

To exercise any of the rights above, contact sodeno19's privacy team by email at support@sodeno19.xyz, clearly stating the right you wish to exercise along with sufficient information for us to verify your identity. We will process your request within 14 business days and inform you of the action taken.

Sodeno19 uses cookies and similar tracking technologies to enhance your experience on our platform, analyse usage patterns, and ensure platform features function correctly. Cookies are small text files stored in your browser when you visit a website.

You can manage your cookie settings through your web browser. However, disabling essential or security cookies will affect your ability to use the sodeno19 platform to its full extent. sodeno19 cookie durations range from 30 minutes (session cookies) to 13 months (persistent cookies), depending on the cookie type.

The sodeno19 platform may contain links to third-party services required for its operation — such as game providers and payment processors — which operate under their own separate privacy policies, independent of this one.

Sodeno19 is not responsible for the privacy practices or content of any external services. We recommend reading the privacy policy of any relevant third-party service in connection with your use of sodeno19 before providing them with any personal information directly.

Sodeno19 is an entertainment platform strictly for individuals aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe your child or any underage individual has registered or used sodeno19, please contact us immediately at support@sodeno19.xyz.

If sodeno19 becomes aware that personal data belonging to a minor has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the relevant account. Our age verification mechanisms are designed to prevent registration by minors; however, we rely on users to provide their accurate date of birth.

Sodeno19 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, the technologies we use, new legal requirements, or other relevant factors.

When we make material changes to this Privacy Policy, we will notify you via an in-platform notification on sodeno19 or by email to your registered address at least 14 days before the changes take effect. For minor changes that do not materially affect your rights, we may update this page without prior notice.

The "Last Updated" date at the top of this page will be revised whenever this Privacy Policy is amended. By continuing to use the sodeno19 platform after any changes take effect, you are deemed to have accepted the updated policy. We recommend reviewing this page periodically.

If you have any questions, concerns or complaints regarding sodeno19's Privacy Policy or how we handle your personal data, we encourage you to reach out to us directly. Our privacy team responds in Bahasa Melayu and will ensure your concerns are taken seriously and addressed in a timely manner.

If you are not satisfied with how we have handled your privacy complaint following our internal resolution process, you have the right to refer the matter to Malaysia's Department of Personal Data Protection (JPDP) or the relevant authority under the PDPA 2010.