At Sobat500, your personal data is handled with the same rigour we apply to every other aspect of the Platform. This document explains clearly what data we collect, why we collect it, how we use it, and what rights you hold as a data subject.
A plain-language summary of our core data protection commitments — before you read the full policy below.
We collect only the data strictly necessary for account management, KYC verification, fraud prevention, and improving the Platform experience — nothing superfluous.
All personal data is encrypted in transit using TLS 1.2+ and stored in access-controlled environments. Sobat500 applies industry-standard security practices at every layer.
Sobat500 does not sell, rent, or trade your personal information to third-party marketers. Your data is not a product — ever.
You have the right to access, correct, export, and in certain cases erase your personal data. Section 9 of this policy explains each right and how to exercise it.
We do not retain personal data indefinitely. Retention periods are tied to legitimate business, legal, or regulatory purposes — and data is securely deleted when those periods expire.
If this policy changes materially, we will notify you via email or a prominent notice on the Platform before the changes take effect. No surprises, no small print tricks.
This Privacy Policy ("Policy") describes how Sobat500 ("we", "us", "our", "the Platform") collects, processes, stores, and discloses personal data in connection with your use of the website located at sobat500.cam and all associated services, games, and features offered thereunder. Sobat500 is committed to protecting the privacy and personal data of all players, including those accessing the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia.
By registering a player account or continuing to use the Platform, you acknowledge that you have read, understood, and consent to the data processing practices described in this Policy. If you do not agree to any part of this Policy, please discontinue use of the Platform and contact our support team to close your account.
This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which contain provisions relevant to the collection and use of certain categories of player data.
This Policy was last reviewed and updated on 1 January 2026. We encourage you to review this page periodically to stay informed of any changes to our data handling practices.
The following definitions apply throughout this Policy:
"Personal Data" — Any information relating to an identified or identifiable natural person. This includes name, identification number, contact details, financial information, device identifiers, and behavioural data where such data can be linked to a specific individual.
"Processing" — Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction, whether or not by automated means.
"Data Subject" — The individual to whom the personal data relates — in the context of this Policy, primarily the registered player ("you").
"Data Controller" — The entity that determines the purposes and means of processing personal data. Sobat500 acts as Data Controller with respect to the personal data collected through the Platform.
"Data Processor" — A third party that processes personal data on behalf of the Data Controller pursuant to a written agreement and under the Data Controller's instruction.
"KYC" — Know Your Customer: the process by which Sobat500 verifies the identity, age, and residential jurisdiction of a player using government-issued documents and supporting evidence.
"Consent" — A freely given, specific, informed, and unambiguous indication of agreement by the data subject to the processing of their personal data for one or more specified purposes.
Sobat500, operating through the domainsobat500.cam, is the Data Controller responsible for your personal data collected through this Platform. As Data Controller, Sobat500 determines why and how your personal data is processed, and bears accountability for ensuring that processing is conducted lawfully, fairly, and transparently.
For all data protection enquiries, requests, or complaints, players may contact Sobat500 through the channels set out in Section 16 (Contact & Complaints) of this Policy.
Sobat500 collects personal data through several channels, including account registration, KYC verification, transaction processing, customer support interactions, and automated technical collection. The categories of data collected include:
| Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender, government ID number (MyKad / passport) | Registration form, KYC submission |
| Contact Data | Email address, mobile number, residential address (city, postcode) | Registration form, account settings |
| Financial Data | Bank account details, e-wallet identifiers (Maybank, CIMB, Public Bank, DuitNow), deposit and withdrawal history, cryptocurrency wallet addresses (BTC/USDT) | Payment processing, KYC verification |
| Transaction Data | Deposit amounts (MYR), withdrawal requests, bet history, game session records, bonus redemptions | Platform activity logs |
| Technical Data | IP address, browser type and version, device type and operating system, screen resolution, session timestamps | Automated collection via cookies and server logs |
| Behavioural Data | Pages visited, game categories accessed, betting patterns, session duration, responsible gambling tool usage | Platform analytics |
| Communications Data | Live chat transcripts, email correspondence, WhatsApp messages with support agents | Support interactions |
| Verification Documents | Scanned copies of MyKad, passport, driving licence, proof of address, bank statements | KYC document submission |
We do not intentionally collect special categories of sensitive personal data (such as racial or ethnic origin, religious beliefs, health data, or biometric data) unless expressly required for legal or compliance obligations and with your explicit consent.
Sobat500 processes personal data only where a lawful basis exists. Depending on the nature of the processing activity, we rely on one or more of the following lawful bases:
Sobat500 uses the personal data we collect for the following purposes:
Sobat500 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data with third parties only in the following limited circumstances:
We confirm: Sobat500 does not share your personal data with third-party advertisers, data brokers, or marketing agencies. Your identity and financial data will never be sold or monetised outside of the purposes described in this Policy.
Sobat500 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following indicative retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | AML compliance and regulatory obligations |
| KYC Verification Documents | 5 years from submission date | Anti-money laundering legal requirements |
| Financial & Transaction Data | 7 years from transaction date | Accounting, audit, and fraud prevention |
| Customer Support Correspondence | 3 years from last interaction | Dispute resolution and service improvement |
| Technical & Behavioural Data (logs) | 12 months from collection | Security monitoring and fraud detection |
| Marketing Consent Records | Until consent withdrawal + 2 years | Proof of lawful basis for marketing |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any individual. Where anonymisation is not technically feasible, data is destroyed using industry-standard secure deletion methods.
As a data subject, you hold a number of rights in relation to the personal data Sobat500 holds about you. These rights are described below. To exercise any of these rights, please contact us using the details inSection 16. We will respond to valid requests within a reasonable timeframe, and in any case no later than 30 days from receipt.
Request a copy of the personal data Sobat500 holds about you, along with information about how it is processed.
Request correction of inaccurate or incomplete personal data held your account or KYC records.
Request deletion of your personal data where we no longer have a lawful basis to retain it, subject to legal retention obligations.
Request that we restrict processing of your data in certain circumstances, such as while accuracy is disputed or an objection is pending.
Receive a copy of data you have provided to us in a structured, machine-readable format, where technically feasible.
Object to processing based on legitimate interests, including profiling for responsible gambling monitoring purposes.
Please note that certain rights may be limited where processing is necessary to comply with a legal obligation, detect or prevent fraud, or protect the rights of other individuals. Sobat500 will clearly explain any such limitation when responding to a rights request.
Sobat500 uses cookies and similar tracking technologies (including local storage and session identifiers) to operate and improve the Platform. Cookies are small data files placed on your device that enable core platform functions and help us understand how players use the Platform.
The categories of cookies we use include:
Sobat500 does not deploy third-party advertising or behavioural targeting cookies. You may configure your browser to block or delete cookies; however, doing so may impair the functionality of the Platform, including the ability to log in or place bets.
Sobat500 implements a comprehensive range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, Sobat500 will notify affected players without undue delay and will take immediate remediation steps to contain the breach and prevent further exposure.
Players also have a responsibility to protect their own accounts. Never share your password, two-factor authentication codes, or account recovery details with any third party, including individuals claiming to be Sobat500 staff. Our agents will never ask for your full password.
The Platform is strictly intended for individuals aged21 years and above. Sobat500 does not knowingly collect personal data from individuals under the age of 21. Any account found to have been registered by an individual under 21 will be immediately suspended, all balances forfeited, and the relevant data deleted or reported as required by applicable law.
If you believe that a person under 21 has registered an account or provided personal data to Sobat500, please contact our support team immediately at [email protected] (plain text — not a clickable link) so that we can investigate and take appropriate action.
Sobat500 operates internationally and may transfer personal data to servers or service providers located outside Malaysia. Where such transfers occur, Sobat500 ensures that appropriate safeguards are in place, including contractual data transfer agreements that impose equivalent data protection standards on the receiving entity.
Players in Malaysia should note that their personal data may be processed by infrastructure located in jurisdictions whose data protection laws may differ from those in force in Malaysia. By using the Platform, you acknowledge and consent to this possibility, subject to the safeguards described above.
The Platform does not contain links to third-party websites for commercial purposes. Any reference to third-party services within this Policy (such as payment networks or responsible gambling resources) is for informational purposes only. Sobat500 is not responsible for the privacy practices of any third-party service, and players should review the relevant privacy policies of any external service they access independently.
Sobat500 reserves the right to amend this Privacy Policy at any time. Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — we will provide advance notice by:
Your continued use of the Platform after the effective date of any amended Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must cease using the Platform and may request account closure in accordance with our Terms & Conditions.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the Sobat500 Data Protection team through the following channels:
Live Chat: Available 24/7 on the Platform. Select "Privacy / Data Request" from the support menu. Average response: under 5 minutes.
WhatsApp: Contact details are provided upon request via live chat to verified account holders.
Email: [email protected] (plain text — not a clickable link). Please use the subject line "Privacy Policy – [Nature of Request]" to ensure prompt routing to our data protection team. We aim to respond within one (1) business day.
If you are not satisfied with our response to a data protection concern, you may have the right to lodge a complaint with the applicable data protection supervisory authority in the jurisdiction from which you are accessing the Platform. Sobat500 encourages players to contact us first so that we have the opportunity to resolve any concern directly and promptly.
Have questions about how Sobat500 handles your data? Our support team is available 24/7 in English, Bahasa Melayu, and Mandarin.
For players aged 21 and above only. sobat500.cam