Privacy Policy Sone 970 — How We Protect the Personal Data of Malaysian Members

Sone 970 collects members' personal data only for the purposes stated in this Privacy Policy. We do not collect more than what is necessary to operate the platform and meet regulatory requirements. Below are the categories of data we collect and their respective purposes:

1.1 Data You Provide Directly

• Registration Information: The username, Malaysian phone number, and password you create when registering your sone 970 account.
• Identity Verification (KYC) Information: MyKad or passport number, full name as stated in official documents, and proof of address — collected when verification is required prior to processing withdrawals.
• Communication Information: The content of your correspondence with the sone 970 customer support team via live chat or email.
• Feedback & Complaints: Any feedback, suggestions, or complaints you submit to sone 970 through any communication channel.

1.2 Automatically Collected Data

• Platform Usage Data: Games played, bets placed, transaction history, and activity patterns within the sone 970 platform.
• Technical Data: IP address, browser type, device type, operating system, and screen resolution — used to optimise how the platform displays on your device.
• Approximate Location Data: Estimated state or city based on your IP address — used for security and fraud detection purposes only, not to identify your precise location.
• Server Logs: Technical records of login and logout activity, including the date, time, and device used — retained for account security purposes.

1.3 Financial Transaction Data

Sone 970 maintains records of all financial transactions, including deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX, as well as withdrawal records. These records include the date, time, amount in RM, and payment method used. Sensitive details such as bank account numbers or eWallet PINs are not stored on sone 970's servers.

Sone 970 uses the personal data collected solely for the purposes outlined below. We will not use your data for any purpose not listed here without first obtaining your additional consent.

2.1 Platform Operations & Services

• Creating and managing your sone 970 member account.
• Deposits and withdrawals in MYR are processed through your chosen payment method.
• Unlock access to over 1,000 games including slots, live baccarat, and sports betting across football, badminton, e-sports, and more.
• Sending important account-related notifications such as transaction confirmations, security alerts, and bonus updates.
• Providing effective customer support when you reach out to us with a query or issue.

2.2 Security & Fraud Prevention

Technical and transaction data is used by the sone 970 security team to detect and prevent fraudulent activity, money laundering, multiple accounts, bonus abuse, and other security threats. This protects not only sone 970, but all members who use the platform in good faith.

2.3 Platform Improvements

Aggregated, anonymised usage data is used to understand platform usage patterns, identify areas for improvement, and develop new features that meet the needs of Malaysian players. For example, the decision to optimise the mobile experience came from data showing that the majority of members play on their smartphones.

2.4 Legal & Regulatory Compliance

Sone 970 retains financial transaction records and KYC information to comply with Anti-Money Laundering (AML) obligations and other applicable regulatory requirements. These records may be disclosed to the relevant authorities if required by law or a valid court order.

Sone 970 does not sell, rent, or share members' personal data with third parties for commercial or marketing purposes. However, there are limited situations where data must be shared with certain parties to enable platform operations — these are set out transparently below.

3.1 Service Providers (Data Processors)

Sone 970 works with carefully selected third-party service providers to support platform operations. These providers act as data processors on behalf of sone 970 and are bound by strict confidentiality agreements. The categories of providers involved include:

• Payment Gateway: To process deposits and withdrawals via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX, and other local Malaysian payment methods — only the information necessary to complete the transaction is shared.
• Game Providers: Evolution Gaming, Pragmatic Play, PG Soft, and other game providers on sone 970 receive only the minimum session data required to run their games — no personal data beyond operational necessity is shared.
• Cloud Infrastructure: sone 970's servers and technical infrastructure are hosted by certified cloud infrastructure providers bound by data processing agreements that comply with international data protection standards.

3.2 Legal Requirements

Sone 970 may disclose members' personal data to the relevant authorities — including law enforcement, anti-corruption bodies, or financial regulators — where required by applicable Malaysian law, a valid court order, or formal legal process. In such circumstances, sone 970 will disclose only the minimum data necessary and will endeavour to notify the member concerned (where permitted by law) before disclosure takes place.

3.3 Business Transfers

In the event of a merger, acquisition, or transfer of sone 970's assets to another entity, member data may form part of the transferred assets. In such circumstances, sone 970 will ensure that the receiving party upholds data protection standards equivalent to those set out in this Privacy Policy, and members will be notified in advance.

Sone 970 continually invests in technical and organisational security measures to protect members' personal data against unauthorised access, breaches, alteration, or accidental destruction. The security layers we apply are as follows:

4.1 Technical Security

• Transmission Encryption: All data transmitted between your browser or app and sone 970's servers is protected by TLS 1.3 with AES-256 encryption — among the highest security standards in the industry.
• Storage Encryption: Sensitive data stored in sone 970's databases — including KYC information — is encrypted at rest using AES-256 standards.
• Firewall & Intrusion Detection System: Sone 970's infrastructure is protected by multi-layered firewalls and an intrusion detection and prevention system (IDS/IPS) that monitors traffic continuously, 24 hours a day.
• Two-Factor Authentication: Internal access to systems containing member data requires two-factor authentication from all relevant sone 970 staff.

4.2 Internal Access Controls

Access to members' personal data within sone 970 is restricted to staff with a legitimate operational need only — based on the principle of least privilege. All staff access to personal data is logged and monitored on a regular basis. Staff who access data without a valid operational reason are subject to disciplinary action.

4.3 Security Incident Response

In the event of a data breach affecting members' personal data, sone 970 has a documented incident response procedure in place. We will notify affected members within the timeframe required by applicable law, and will take immediate steps to contain the incident and prevent further breaches. Incident reports will also be submitted to the relevant authorities where required by law.

The sone 970 platform uses cookies and similar tracking technologies to enable core platform functionality, enhance the user experience, and understand usage patterns on an aggregate basis. This page explains the types of cookies we use and how you can manage them.

5.1 Types of Cookies We Use

• Essential Cookies (Required): Required for core platform functionality — including login session cookies, CSRF security cookies, and language preference cookies. Without these, the platform cannot function properly. These cookies cannot be disabled.
• Functional Cookies: Saves your preferences — such as your favourite baccarat table limits, road record display settings, and other interface configurations — so you do not have to reconfigure them each time you log in. These cookies can be disabled, but doing so will affect your platform experience.
• Internal Analytics Cookies: Used by sone 970 to understand aggregate usage patterns — which pages are visited most, which games are most popular, and where players typically drop off in the registration flow. All analytics data is aggregated and anonymised.

5.2 Managing Cookies

You can manage and delete cookies through your web browser settings. Most modern browsers — including Chrome, Firefox, Safari, and Edge — allow you to view, delete, or block cookies from specific websites. Please refer to your browser's help documentation for detailed instructions. Note that disabling essential cookies may affect your ability to log in or use certain features on the sone 970 platform.

5.3 Pixels & Tracking Tags

Sone 970 does not use third-party tracking pixels (such as Facebook Pixel or Google Ads tags) within the restricted, login-required areas of the platform. This means your gaming activity and transactions are not tracked by any social media platform or third-party advertising network.

As a sone 970 member whose data we process, you have the following rights under applicable data protection law. Sone 970 respects and facilitates the exercise of these rights at no charge.

• Right of Access: You may request a copy of all personal data we hold about you. We will provide this data in a readable format within 14 business days.
• Right to Rectification: If any data we hold about you is inaccurate or incomplete, you may request a correction. We will process corrections within 7 business days.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data when it is no longer needed for the purpose it was collected. Please note that this right is not absolute — we may need to retain certain data to meet legal or regulatory obligations.
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict the processing of your data — for example, while you are disputing its accuracy or while we are reviewing your deletion request.
• Right to Data Portability: You may request the data you have provided to us in a structured, machine-readable format (such as CSV or JSON) for transfer to another party if you wish.
• Right to Object: You may object to the processing of your data for specific purposes. For example, you can request to opt out of all marketing communications from sone 970 — and we will action that request immediately.

To exercise any of the above rights, please submit a written request to support@sone970.net by stating the right you wish to exercise along with sufficient information for us to verify your identity. We will acknowledge receipt of your request within 3 business days and resolve it within 14 business days.

Sone 970 is an online gambling platform strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If you are a parent or guardian and believe that your underage child has registered an account on sone 970, please contact us immediately at support@sone970.net. We will investigate the matter, terminate the account, and delete all related data promptly upon verification.

Sone 970 applies an age verification process during registration and reserves the right to request proof of age (such as a copy of your MyKad) at any time. Accounts confirmed to have been registered by underage individuals will be terminated immediately and all related data will be removed from our systems.

Sone 970 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new regulatory requirements, or technical changes to the platform. We encourage you to review this page periodically.

For material amendments — meaning significant changes to how we use your personal data — sone 970 will notify you via:

• A prominent in-platform notice on sone 970 the next time you log in.
• A notification sent to your registered phone number.
• At least 14 days' notice before changes take effect (for material changes).

Continued use of the sone 970 platform after the effective date of any amendment will be considered acceptance of the revised Privacy Policy. If you do not agree with the changes, you may close your account before the effective date and request deletion of your data.

The currently effective version of the Privacy Policy is the one dated 1 January 2026. Previous versions of the Privacy Policy are kept in our archives and may be requested via support@sone970.net.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by sone 970, please contact us through the following channels:

• Privacy Email: support@sone970.net — use the subject line "Data Privacy Request" to expedite processing.
• Live Chat: Available 24/7 within the sone 970 platform after logging in — average response time under 2 minutes.

We are committed to responding to all privacy-related enquiries in Bahasa Melayu within 3 business days. For formal data subject rights requests (access, deletion, correction), processing takes up to 14 business days from successful identity verification.

This Privacy Policy forms an integral part of Terms & Conditions sone 970. By using the sone 970 platform, you confirm that you have read, understood, and agreed to this Privacy Policy.