At soju88, your privacy is a responsibility we take seriously. This document clearly explains how we collect, use, store, and protect your personal data — all in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). No confusing legal jargon, just the information you need to know.
Soju88 takes every Malaysian player's privacy seriously. When you create an account, make a deposit via Touch 'n Go eWallet or GrabPay, play slots, or reach out to our customer support team, you are entrusting soju88 with your personal information — and that trust is something we never take lightly.
This Privacy Policy clearly and transparently explains how soju88 manages players' personal data — from the types of data we collect and why we need it, to how we protect it, who can access it, and what rights you have over it. It is written in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data security.
By using the soju88 platform — whether by registering an account, logging in, or simply browsing our website — you agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please contact the soju88 support team before continuing to use the platform.
This is the foundation of how soju88 handles every Malaysian player's personal data — transparently, responsibly, and with integrity.
All data transmitted between your device and soju88's servers is protected by 256-bit SSL encryption — the same standard used by Malaysia's leading banking institutions. This means your login credentials, deposit and withdrawal transaction details, and personal data cannot be intercepted by any unauthorised party while in transit.
Soju88 complies with all requirements of the Malaysia Personal Data Protection Act 2010 (PDPA). This includes obtaining your consent before collecting data, clearly stating the purpose of collection, and giving you the right to access and correct your data. PDPA compliance is not merely a legal obligation for soju88 — it is a moral responsibility to our players.
Soju88 has never sold and will never sell players' personal data to any third party for marketing, profiling, or any other commercial purpose. Your data belongs to you. We use it solely to operate the soju88 platform and meet legitimate legal requirements.
Only soju88 staff who require data access to carry out their duties are permitted to view players' personal information — and only to the extent necessary. All access is logged and monitored. soju88 staff undergo data protection training and are bound by strict confidentiality agreements.
Soju88 players have the full right to access, correct, transfer, and in certain circumstances, request the deletion of their personal data. These rights can be exercised easily through your account panel or by contacting the soju88 privacy team via our official email.
In the unlikely event of a data breach that may affect your rights or freedoms, soju88 is committed to notifying you within the timeframe required under PDPA — not days or weeks later. Transparency in difficult situations is part of the trust we build with our players.
Soju88 only collects personal data that is strictly necessary to operate the platform, verify player identities, process financial transactions, and comply with legitimate legal requirements. We do not collect data that is irrelevant or unnecessary.
Data collected during account registration:
Data collected during platform usage:
Additional identity verification data (when required):
Data Minimisation Principle: Soju88 follows the principle of data minimisation — we only collect data that is strictly necessary for the stated purpose. We do not collect sensitive information such as health data, religious beliefs, or political views. All data collected has a clear and legitimate purpose.
Soju88 uses collected personal data solely for legitimate, clearly stated purposes. We do not use your data for purposes unrelated to platform operations or for which your prior consent has not been obtained.
The primary purposes for which soju88 uses your data:
Marketing Opt-Out Options: If you do not wish to receive marketing communications from soju88, you may opt out at any time by clicking the "unsubscribe" link in any soju88 promotional email, or by contacting our support team. Opting out does not affect important service communications related to your account.
Soju88 does not sell, rent, or disclose players' personal data to third parties for their own commercial purposes. This is an absolute commitment with no exceptions.
However, there are limited situations where soju88 needs to share data with certain parties to enable our services to function properly or to comply with legal obligations:
Business Merger or Acquisition: In the unlikely event that soju88 is involved in a merger, acquisition, or asset sale, player data may be transferred to the new entity. In such circumstances, you will be notified in advance and your rights under PDPA will continue to be protected. The new entity will be bound by a privacy policy that provides at least the same level of protection as this one.
Soju88 continuously invests in security infrastructure to ensure the personal data of all Malaysian players is protected to the highest standard. Our technical and organisational measures include:
Shared Responsibility: While soju88 does everything possible to protect your data, digital security is a shared responsibility. We encourage you to use a strong, unique password for your soju88 account, never share your login credentials with anyone, enable two-factor authentication, and always ensure that any device you use to log in to soju88 is free from malware.
As a soju88 player who is a Malaysian citizen or resident, you have certain rights under the Personal Data Protection Act 2010 (PDPA) with respect to your personal data. soju88 respects and facilitates the exercise of all these rights:
| Your Rights | Description | How to Exercise |
|---|---|---|
| Right to Access | Requesting a copy of the personal data soju88 holds about you | Email support@soju88.express |
| Right to Rectification | Correcting inaccurate or incomplete personal data | Account panel or contact support |
| Right to Erasure | Requesting erasure of your data in specific circumstances permitted under PDPA | Email support@soju88.express |
| Right to Data Portability | Receiving your data in a machine-readable format | Written request required |
| Right to Object | Objecting to the processing of your data for direct marketing purposes | Opt-out link in emails or contact support |
| Right to Restriction | Request restriction of data processing in certain circumstances | Email support@soju88.express |
Soju88 will process all data rights requests within 30 calendar days of receipt. For more complex cases, this period may be extended to up to 60 days, with prior notice to you. We will not charge a fee for exercising these rights, except in cases where requests are repetitive or excessive.
Exceptions to Data Erasure: The right to data deletion has certain limitations under PDPA. soju88 may need to retain specific data even after receiving a deletion request — for example, financial transaction records required for tax or anti-money laundering compliance, or data needed to resolve outstanding disputes.
The soju88 platform uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance, and maintain the security of your login session. The following types of cookies are used:
You can manage cookies through your browser settings. Most browsers allow you to view, delete, and block cookies. However, please note that blocking certain cookies may affect the functionality of the soju88 platform — for example, you may need to log in again each time you open the platform if session cookies are blocked.
No Third-Party Advertising Cookies: soju88 does not use third-party cookies for advertising or cross-site tracking purposes. We do not allow third-party ad networks to track our players' activity on the soju88 platform for targeted advertising.
Soju88 retains players' personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by applicable Malaysian law. The general principles we follow are as follows:
Once the relevant retention period has elapsed, personal data is securely deleted using irreversible deletion methods, or fully anonymised so it can no longer be linked back to any individual.
Early Deletion Requests: If you wish to request deletion of your data before the end of the standard retention period, soju88 will consider the request taking into account any relevant legal obligations. In many cases, we can delete the majority of your personal data while retaining the minimum records required by law — and we will clearly inform you of what can and cannot be deleted, and why.
If you have any questions, concerns, or requests regarding this Privacy Policy or how soju88 handles your personal data, we encourage you to reach out to us directly. The soju88 data privacy team is ready to assist.
You can reach soju88 regarding privacy matters through the following channels:
Soju88 also encourages players to read the related documents that complement this Privacy Policy, including Terms & Conditions and page Responsible Gaming us.
Changes to This Privacy Policy: soju88 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or improvements to how we protect your data. All material changes will be communicated to registered players via email at least 14 days before they take effect. The date of the most recent update is always shown at the top of this document.
A simple four-step process for submitting any request related to your personal data with soju88.
Specify the type of request — data access, information correction, account deletion, marketing objection, or any other right under PDPA. This helps us process your request more efficiently.
Send an email to support@soju88.express with the subject line "Data Privacy Request". Include your soju88 username or account email and describe your request clearly.
For your own security, soju88 needs to verify your identity before processing any data request. This may involve an OTP sent to your registered phone number or a brief verification via email.
Soju88 processes all data rights requests within 30 calendar days. You will receive an acknowledgement of receipt within 3 business days and a full response within the stipulated timeframe.
The Malaysia Personal Data Protection Act 2010 (PDPA) is the primary legislation governing the collection, processing, and storage of personal data in Malaysia. It sets out seven data protection principles that every organisation handling the personal data of Malaysian citizens must comply with.
Soju88 fully complies with all seven PDPA principles: the General Principle (data is only processed for permitted purposes), the Notice and Choice Principle (you are informed about how your data is used), the Disclosure Principle (data is not disclosed without consent), the Security Principle (appropriate technical and organisational safeguards are in place), the Data Integrity Principle (data is accurate and up to date), the Access Principle (you may access your own data), and the Sensitive Personal Data Principle (additional protection applies to sensitive data categories).
As a platform serving Malaysian players, soju88 also complies with relevant obligations under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA), which requires us to verify and maintain customer records. These requirements do not conflict with your privacy rights — they are legal obligations that protect Malaysia's financial system from abuse.
If you believe soju88 has violated your privacy rights under PDPA and are unsatisfied with our response, you have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner. However, we encourage you to reach out to us first, as most privacy issues can be resolved quickly and satisfactorily through soju88's direct channels.
Soju88 complies with all seven principles of Malaysia's PDPA. We manage Malaysian players' personal data to the same protection standards upheld by licensed financial institutions.
256-bit SSL for all data in transit and AES-256 encryption for stored data — the same standards used by Maybank and CIMB to protect their online banking customers' data.
Soju88 manages your data from the point of collection through to final deletion — with clear retention policies, secure erasure, and periodic audits to ensure no data is held longer than necessary.
The most frequently asked questions by Malaysian players about how soju88 handles their personal data.
All transactions are processed through secure, recognised Malaysian payment channels — your financial data is fully protected.
Malaysia online banking security standards
Malaysia Personal Data Protection Act 2010
No hidden fees, safe and secure
Soju88 does not sell your data. soju88 uses 256-bit SSL encryption for all transactions. soju88 is fully compliant with Malaysia's PDPA 2010. You have the right to access, correct, and request deletion of your data. For any privacy enquiries, contact support@soju88.express. For further details, refer to Terms & Conditions and page Responsible Gaming us.
Soju88 protects your privacy with 256-bit SSL encryption, full compliance with Malaysia's PDPA 2010, and a firm commitment never to sell your data. Register for a free account, deposit a minimum of RM10 via Touch 'n Go, GrabPay or DuitNow, and enjoy over 1,000 games with complete peace of mind.