At Sonitoto, we treat your personal data with the same seriousness we apply to platform security. This Privacy Policy sets out in plain terms how we collect, use, store, and protect your information — and the rights you hold over it as a user of our platform.
Version 1.0 — January 2026
All personal data collected by Sonitoto is stored using industry-standard encryption. Financial information and KYC documents are held in secured, access-controlled environments with strict internal data governance policies.
Sonitoto does not sell, rent, or trade your personal information to third parties under any circumstances. Your data is used exclusively for the purposes described in this Privacy Policy.
You have the right to access, correct, restrict, or request deletion of your personal data at any time. Submit a data request through our support team and we will respond within 30 days.
We use cookies solely to improve your platform experience and analyse site performance. We do not use cookies to sell behavioural data to advertising networks. Cookie preferences are explained clearly in Section 9.
Identity and address documents submitted for KYC verification are handled with the highest level of care. Documents are only accessed by authorised verification staff and are not retained beyond the legally required period.
In the unlikely event of a data breach that affects your personal information, Sonitoto will notify affected users as promptly as practicable and take immediate steps to contain and remediate the incident.
This Privacy Policy ("Policy") sets out how Sonitoto ("Company", "we", "us", "our"), the operator of the online gambling and sports betting platform accessible at sonitoto.cam, collects, processes, stores, shares, and protects your personal data.
Sonitoto is committed to protecting the privacy and security of all individuals who interact with our platform, including registered Players, prospective users, and visitors. This Policy applies to all personal data collected through our website, mobile platform, customer support channels, and any other interactions with our Services.
By registering an account with Sonitoto or otherwise accessing our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not consent to any part of this Policy, you must discontinue use of the platform immediately.
This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy, all of which together govern your use of the Sonitoto platform.
For the purposes of this Privacy Policy, the following definitions apply:
Sonitoto acts as the Data Controller for all personal data collected through the sonitoto.cam platform and its associated services. As Data Controller, Sonitoto determines the purposes for which personal data is collected and the manner in which it is processed.
Where Sonitoto engages third-party service providers — such as payment processors, identity verification providers, or customer support platforms — those parties act as Data Processors under binding contractual agreements that require them to handle personal data only in accordance with Sonitoto's documented instructions and this Privacy Policy.
When you create an account with Sonitoto, we collect the following information:
To comply with anti-money laundering obligations and to verify player identity before processing withdrawals, we collect:
We collect transaction data necessary to process deposits and withdrawals, including:
Sonitoto does not store full bank account numbers, card numbers, or e-wallet PIN codes. Payment processing is handled by certified third-party processors.
Sonitoto processes your personal data for the following specific purposes:
| Purpose | Data Used | Basis |
|---|---|---|
| Account creation and management | Registration data, contact details | Contract performance |
| Identity verification (KYC) | KYC documents, selfie | Legal obligation |
| Processing deposits and withdrawals | Financial and transaction data | Contract performance |
| Fraud and money laundering prevention | Financial, technical, KYC data | Legal obligation / legitimate interest |
| Responsible gambling monitoring | Gaming activity, limit settings | Legal obligation / legitimate interest |
| Customer support | Account data, communications | Contract performance |
| Platform analytics and improvement | Technical and device data | Legitimate interest |
| Marketing communications | Contact details, preferences | Consent |
| Legal compliance and reporting | All relevant data | Legal obligation |
Sonitoto processes personal data on one or more of the following legal bases:
The processing of your registration data, financial transactions, betting activity, and account management operations is necessary for the performance of the contract between you and Sonitoto. Without this processing, we cannot provide the Services you have agreed to receive.
Certain data processing activities — particularly KYC verification, anti-money laundering checks, and responsible gambling monitoring — are required by applicable regulations. We process data for these purposes to fulfil our legal and regulatory obligations.
We process technical and usage data to improve platform performance, detect fraud, ensure security, and develop new features. These activities are conducted in pursuit of our legitimate business interests, balanced against your rights and expectations as a user.
Where we send you marketing communications or use non-essential cookies, we do so on the basis of your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing activities. Withdrawal of consent for marketing does not affect your ability to use the platform.
Sonitoto engages trusted third-party processors to deliver specific aspects of our Services. These include:
All third-party processors are bound by contractual data processing agreements that restrict their use of your data to the specific purposes for which it has been shared. They are prohibited from using your personal data for their own commercial purposes.
Sonitoto may disclose personal data to relevant authorities, regulators, or law enforcement agencies where required to do so by applicable law, court order, or regulatory directive. We will notify you of such disclosure where permitted to do so.
Sonitoto does not sell, rent, or trade personal data to any third party for commercial or marketing purposes. This is an absolute policy position, not a conditional one.
Sonitoto retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any legal or regulatory obligations requiring longer retention periods.
Where data is no longer required for any purpose, Sonitoto will securely delete or anonymise it in accordance with our internal data governance procedures.
Cookies are small text files stored on your browser or device when you visit a website. They enable the website to recognise your device and remember certain information about your preferences and prior interactions.
Sonitoto uses the following categories of cookies:
Sonitoto does not use cookies to track your activity across third-party websites, to build advertising profiles, or to sell behavioural data to advertisers or data brokers.
You may manage cookie preferences through your browser settings. Most browsers allow you to block, delete, or receive notifications about cookies. Please note that disabling essential cookies may prevent you from accessing certain features of the platform. Browser-based cookie management instructions vary by browser — consult your browser's help documentation for guidance.
Sonitoto implements a multi-layered approach to data security, including but not limited to:
While Sonitoto employs robust security measures, no digital system is entirely immune to risk. You are encouraged to use strong, unique passwords for your account and to activate 2FA. Report any suspected unauthorised account activity to our support team immediately.
As a user of the Sonitoto platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team via the details in Section 16.
You may request a copy of all personal data we hold about you. We will provide this within 30 days of a valid request.
If your personal data is inaccurate or incomplete, you may request correction. Account profile details can also be updated directly from your account settings.
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
You may request restriction of processing activities while a data dispute is under investigation, or where you contest the accuracy of your data.
You may request your personal data in a structured, machine-readable format to transfer to another service provider where technically feasible.
You may object to processing carried out on the basis of legitimate interests, including direct marketing. We will cease such processing unless compelling grounds exist.
Sonitoto will acknowledge all data rights requests within 7 business days and provide a substantive response within 30 calendar days. Where a request is complex or numerous, we may extend this period by a further 30 days, of which we will notify you. We reserve the right to request proof of identity before actioning data rights requests.
Sonitoto's platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you believe that a minor has provided personal information to us, please contact us immediately so that we may investigate and take appropriate action, including the deletion of such data and closure of any associated account.
Date of birth is a mandatory field at registration and is cross-referenced during KYC verification. Any account found to belong to a person under 21 years of age will be immediately suspended and the matter may be reported to relevant authorities.
In the course of providing our Services, personal data may be transferred to and processed in countries outside Malaysia. This may occur when engaging third-party service providers — such as identity verification platforms, customer support infrastructure providers, or cloud hosting services — that are based in or operate from other jurisdictions.
Where such transfers occur, Sonitoto ensures that appropriate safeguards are in place to protect your data, including contractual clauses that bind the receiving party to standards of data protection equivalent to those described in this Policy. Sonitoto does not transfer personal data to jurisdictions that lack adequate data protection frameworks without implementing additional protective measures.
With your explicit consent, Sonitoto may send you promotional communications about new features, bonuses, sports events, and platform updates by email or in-platform notification. You may opt in to marketing communications during registration or through your account settings.
You may withdraw consent to marketing communications at any time by:
Withdrawal of marketing consent does not affect your ability to use the platform or to receive service-related communications (e.g., transaction confirmations, account alerts, and support responses), which are not subject to consent requirements.
Sonitoto reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to registered Players via the registered email address associated with their account or through a prominent notice on the platform prior to the effective date of the change.
The date at the top of this Policy indicates when it was last reviewed and updated. We encourage you to review this Policy periodically to stay informed about how we protect your data. Continued use of the platform following the publication of an updated Policy constitutes your acceptance of the revised terms.
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact Sonitoto through the following channels:
When submitting a data rights request, please include your registered account email address and a description of your request. We may request proof of identity before processing requests that involve access to or deletion of personal data.
Now you know exactly how Sonitoto handles your data. We're committed to keeping your personal information safe, transparent, and always under your control. Ready to experience Malaysia's most trusted online sportsbook?
For players aged 21 and above only. Gambling involves financial risk. Please play responsibly.