Sortoto is committed to handling your personal information responsibly. This Privacy Policy explains what data we collect, how we use it, who we share it with, and the rights available to you as a player on our platform.
Our Privacy Commitments
Six core data protection principles that govern everything Sortoto does with your personal information as a Malaysian player.
All data transmitted between your device and the Sortoto platform is protected by 256-bit SSL/TLS encryption. Your account credentials, payment details, and personal information are encrypted both in transit and at rest on our secured servers.
Sortoto collects only the personal data that is strictly necessary for account operation, payment processing, identity verification, and regulatory compliance. We do not collect data beyond what is reasonably required for these purposes.
Sortoto does not sell, lease, or trade your personal data to third-party advertisers, marketing companies, or data brokers. Your information is used only to operate and improve your experience on the platform and to meet legal obligations.
You have the right to access, correct, and request deletion of your personal data held by Sortoto. These rights can be exercised at any time by contacting our support team. Requests are processed within 30 calendar days of receipt.
Sortoto retains personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable law. Account data is typically retained for a minimum of 5 years following account closure for regulatory compliance purposes.
In the event of a personal data breach that is likely to result in risk to your rights and freedoms, Sortoto will notify affected players without undue delay, and in any event within 72 hours of becoming aware of the breach, in accordance with applicable data protection obligations.
This Privacy Policy ("Policy") is issued by Sortoto ("Sortoto", "we", "us", "our") and governs the collection, use, storage, disclosure, and protection of personal data in connection with the Sortoto website located at https://sortoto.cam and all related online casino and sports betting services ("Platform").
We understand that privacy is important to our players across Malaysia — whether you are based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, or Shah Alam. This Policy is designed to give you a clear, honest account of how your data is handled so you can make informed decisions about using our services.
This Policy should be read alongside our Terms and Conditions and Responsible Gambling Policy, both of which form part of the overall contractual framework between you and Sortoto. By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.
For the purposes of this Privacy Policy, the following terms carry the meanings defined below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can identify a natural person, directly or indirectly — including name, identification number, contact information, location data, and online identifiers. |
| "Processing" | Any operation performed on personal data — including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction. |
| "Data Subject" | The individual whose personal data is being processed — in this context, a registered Sortoto player or website visitor. |
| "Third Party" | Any person or entity other than Sortoto and the data subject — including payment processors, identity verification providers, and regulatory bodies. |
| "KYC" | Know Your Customer — the identity and address verification process required by Sortoto before processing withdrawals or as requested by our compliance team. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement by the data subject to the processing of their personal data for a stated purpose. |
| "Cookies" | Small text files stored on a user's device by a web browser when visiting a website, used to retain session data, preferences, and analytics information. |
Sortoto collects the following categories of personal data in the course of operating the Platform and providing services to Malaysian players:
Sortoto collects personal data through the following channels:
Sortoto processes your personal data for the following purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and securing your player account, including password management and multi-factor authentication. |
| Identity Verification | Confirming your identity and age (minimum 21 years) in accordance with KYC requirements before processing withdrawals. |
| Payment Processing | Processing MYR deposits and withdrawals through Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, and other local payment channels, as well as cryptocurrency transactions. |
| Fraud Prevention | Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, and other policy violations. |
| Responsible Gambling | Monitoring for signs of problem gambling, enforcing self-exclusion requests, and administering deposit limits and session restrictions. |
| Customer Support | Responding to queries, resolving disputes, and managing complaints submitted by registered players. |
| Platform Improvement | Analysing anonymised usage data to improve platform performance, game selection, and user experience for Malaysian players. |
| Legal Compliance | Meeting obligations imposed by applicable law, including records retention requirements and responses to lawful requests from regulatory or law enforcement authorities. |
| Communications | Sending transactional notifications, security alerts, and — where you have consented — promotional communications about offers relevant to your account. |
Sortoto processes your personal data on the following legal bases, depending on the nature and purpose of the processing activity:
Sortoto does not sell your personal data. We share personal data only with the following categories of recipients, and only to the extent necessary for the purposes described in this Policy:
As an online platform operating across multiple technical environments, Sortoto may transfer personal data to systems and service providers located outside of Malaysia. Where such transfers occur, Sortoto ensures that appropriate safeguards are in place to protect your data in accordance with applicable data protection standards.
Safeguards employed by Sortoto for international transfers include contractual clauses requiring the recipient to maintain data protection standards equivalent to those applied by Sortoto, and selection of third-party processors operating in jurisdictions with recognised data protection frameworks.
Sortoto retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account and identity data | Retained for the lifetime of the account and for a minimum of 5 years following account closure, for regulatory compliance purposes. |
| Financial transaction records | Retained for a minimum of 7 years following the date of each transaction, as required by anti-money laundering obligations. |
| KYC verification documents | Retained for a minimum of 5 years following account closure or the completion of the business relationship. |
| Customer support correspondence | Retained for 3 years following the resolution of the relevant query or dispute. |
| Cookie and usage data | Retained for up to 13 months from collection, in accordance with standard cookie management practices. |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be used to identify any individual.
Sortoto implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Measures in place include:
While Sortoto takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. Players are encouraged to use strong, unique passwords for their accounts and to enable two-factor authentication where available.
As a data subject, you have the following rights in relation to personal data that Sortoto holds about you. These rights may be exercised by contacting us at [email protected]. Requests will be acknowledged within 5 business days and substantively responded to within 30 calendar days.
You may request a copy of the personal data we hold about you and information about how it is processed.
You may request correction of any inaccurate or incomplete personal data held in your account profile.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
You may request that we restrict the processing of your personal data in certain circumstances, such as while a dispute is under investigation.
You may object to processing of your data based on our legitimate interests, including objection to direct marketing.
Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format.
Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
You have the right not to be subject to solely automated decisions that produce significant legal or similarly significant effects.
The Sortoto platform uses cookies and similar tracking technologies to operate core platform functionality, remember your preferences, detect fraud, and — where consent has been given — analyse platform usage patterns.
You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may impair the functionality of the Sortoto platform. Most web browsers provide controls to accept, reject, or delete cookies — consult your browser's help documentation for guidance.
The Sortoto platform is strictly intended for individuals who are 21 years of age or older. Sortoto does not knowingly collect personal data from persons under the age of 21 and does not permit underage individuals to register accounts or participate in any gambling activity on the Platform.
If Sortoto becomes aware that personal data has been collected from a person under the age of 21, we will immediately close the associated account, return any deposits made, forfeiture any winnings in accordance with our Terms and Conditions, and delete all associated personal data from our systems.
The Sortoto platform integrates with third-party service providers for payment processing, identity verification, game content delivery, and fraud detection. While Sortoto exercises care in selecting third-party partners and requires them to maintain appropriate data protection standards, Sortoto is not responsible for the privacy practices of independent third parties operating under their own privacy policies.
Any links to external websites or services that may appear within the Platform are provided solely for informational purposes. Sortoto does not endorse, and is not responsible for, the content or privacy practices of any external websites.
Sortoto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes to this Policy will be communicated to registered players via email notification to the address on file, or through a prominent notice on the Platform, at least 14 days prior to the effective date of the change where practicable.
The current version of this Privacy Policy is always available at https://sortoto.cam/privacy-policy. The "Effective Date" at the top of this document indicates the date from which the most recent version applies. Your continued use of the Platform following the effective date of any update constitutes your acceptance of the revised Policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by Sortoto, please contact our Data Protection team using the details below. All correspondence must be submitted in English.
For information about our gambling rules and platform policies, please refer to our Terms and Conditions. To access our responsible gambling tools and self-exclusion options, please visit the Responsible Gambling page.
Sortoto handles your data with the same care and respect we apply to every aspect of the platform. If you have questions about how your information is used, our team is available around the clock.