Privacy Policy
At Sonic77, we treat your personal data with the same seriousness we bring to platform security. This Privacy Policy sets out exactly what information we collect, why we collect it, how we use and protect it, and what rights you hold as a data subject. We encourage all Sonic77 members — whether you're based in Kuala Lumpur, Penang, Johor Bahru, or anywhere else in Malaysia — to read this document carefully.
All data transmitted between your device and Sonic77 is protected by 256-bit SSL/TLS encryption. Our servers are housed in secure, access-controlled data centres with continuous monitoring and regular independent security audits.
We collect only the personal data that is strictly necessary to provide the Service, fulfil our legal obligations, and process your MYR transactions via DuitNow, FPX, Touch 'n Go eWallet, and other supported payment methods. We do not collect data beyond what is reasonably required.
Sonic77 does not sell, rent, or trade your personal information to third-party advertisers, data brokers, or marketing agencies. Your data is an operational necessity — not a commercial commodity.
You retain full rights over your personal data at all times — including the right to access, correct, restrict, or request deletion of your information. Requests are handled within 30 days of receipt, free of charge for standard submissions.
Sonic77 uses cookies and similar tracking technologies solely for platform functionality, security, and performance analytics. We do not deploy third-party advertising cookies. Cookie preferences can be managed in your browser settings at any time.
We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Account data is retained for a minimum of five years following account closure to satisfy anti-moneylaundering regulatory requirements.
Introduction
This Privacy Policy ("Policy") issued by Sonic77 ("we", "us", "our") and applies to all personal data collected from individuals ("you", "Data Subject", "Member") who access or interact with the Sonic77 platform atsonic77.cam, including all associated sub-domains, mobile interfaces, and connected services (collectively, "the Service").
Sonic77 is committed to responsible data stewardship. We process personal data in accordance with applicable data protection legislation and international best practices for online gaming platforms. This Policy is designed to give you clear, honest information about how your data is handled from the moment you visit our site to the point at which your account is closed and beyond.
By registering an account, making a deposit via Maybank, CIMB, Touch 'n Go eWallet, DuitNow, or any other supported channel, or by otherwise using the Service, you acknowledge that you have read and understood this Privacy Policy. This Policy is to be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference.
Plain Language Summary: We collect your data to run the platform, process payments in MYR, verify your identity, and keep the Service secure. We do not sell your data. You can request access, correction, or deletion at any time by contacting our support team.
Definitions
The following definitions apply throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can reasonably identify a living natural person, directly or indirectly, including name, identification number, contact details, location data, IP address, and behavioural data. |
| "Processing" | Any operation performed on personal data, including collection, storage, retrieval, use, transmission, disclosure, restriction, erasure, or destruction. |
| "Data Controller" | Sonic77, which determines the purposes and means by which personal data is processed in connection with the Service. |
| "Data Processor" | A third party that processes personal data on behalf of Sonic77 under contractual obligation and in accordance with our instructions. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose. |
| "Special Category Data" | Personal data revealing racial or ethnic origin, political opinions, religious beliefs, trade union membership, health data, or biometric data used for identification purposes. |
| "KYC Documentation" | Identity and address verification documents submitted by Members as part of the Know Your Customer compliance process, including MyKad, driver's licence, passport, and utility bills. |
Personal Data We Collect
Sonic77 collects the following categories of personal data in connection with your use of the Service. The specific data collected depends on the nature of your interaction with the platform.
3.1 Registration Data
- Full legal name
- Date of birth (used for age verification — minimum age 21years)
- Residential address (including postcode and state within Malaysia)
- Email address
- Mobile phone number
- Username and encrypted password
- Preferred currency (MYR)
3.2 Identity Verification (KYC) Data
- Copies of government-issued photo identification (Malaysian NRIC/MyKad, driver's licence, or passport)
- Proof of residential address (utility bill from Tenaga Nasional, Indah Water, or Syabas; bank statement; official government correspondence)
- Selfie photographs for liveness and identity verification
- Source of funds documentation for high-value transactions
3.3 Financial & Transaction Data
- Deposit and withdrawal records, including amount, date, time, and payment method
- Payment method identifiers (e-wallet account references, bank account numbers, cryptocurrency wallet addresses)
- Transaction history and account balance records
- Bonus claims, wagering records, and game session data
3.4 Technical & Device Data
- IP address and geolocation data (country and region level)
- Device type, operating system, and browser version
- Session timestamps, page visit logs, and navigation patterns
- Cookies and similar tracking technology identifiers (see Section 10)
3.5 Communications Data
- Records of live chat sessions, support tickets, and email correspondence with Sonic77's customer support team
- Responses to surveys or feedback requests (where voluntarily provided)
3.6 Responsible Gambling Data
- Self-imposed deposit limits, session limits, and cooling-off period requests
- Self-exclusion records and reinstatement requests
- Any disclosures made voluntarily in the context of responsible gambling support interactions
Special Category Data: Sonic77 does not intentionally collect special category personal data (such as health information or racial/ethnic origin) except where it is voluntered in the course of a responsible gambling support interaction. Such data, if received, is treated with the highest level of confidentiality and is not used for any commercial purpose.
How We Collect Personal Data
Sonic77 collects personal data through the following means:
- Directly from you when you complete the account registration form, submit KYC documents, make a deposit or withdrawal, contact customer support, or participate in a survey or promotion.
- Automatically through your use of the platform via cookies, server logs, device fingerprinting, and analytics tools that record technical and behavioural data about your sessions.
- From payment service providers such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency network processors, who may share transaction confirmation data with us in the course of processing your deposits and withdrawals.
- From identity verification partners engaged by Sonic77 to assist with KYC and anti-fraud processes, who may cross-reference submitted documents against databases as permitted by applicable law.
- From publicly available sources, including commercial databases and government registers, solely for the purpose of fraud prevention and compliance with anti-money-laundering obligations.
Purposes of Data Processing
Sonic77 processes your personal data for the following purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Registration data, communications data |
| Age and identity verification (KYC) | Registration data, KYC documentation |
| Processing deposits and withdrawals in MYR | Financial & transaction data, registration data |
| Delivering gaming and sportsbook services | Registration data, financial technical data |
| Fraud detection, AML compliance, and security | All categories as appropriate |
| Customer support and dispute resolution | Registration data, communications data, financial data |
| Responsible gambling monitoring and intervention | Financial data, responsible gambling data, technical data |
| Platform performance optimisation and analytics | Technical data, anonymised behavioural data |
| Service communications (account notifications, security alerts) | Registration data, communications data |
| Compliance with legal and regulatory obligations | All categories as required by applicable law |
Sonic77 does not use your personal data for unsolicited third-party marketing purposes. Any promotional communications from Sonic77 itself (such as bonus notifications or VIP programme updates) are sent only to Members who have not opted out of such communications, and can be unsubscribed from at any time via account settings.
Legal Basis for Processing
Sonic77 processes personal data on the basis of one or more of the following legal grounds:
- Contractual Necessity: Processing is necessary to perform our obligations under the Terms & Conditions agreement with you, including operating your account, processing your MYR transactions, and providing the gaming and betting services you have requested.
- Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including anti-money-laundering (AML) laws, KYC identity verification requirements, data retention mandates, and any lawful requests from competent authorities.
- Legitimate Interests: Processing is necessary for Sonic77's legitimate interests in fraud prevention, platform security, responsible gambling monitoring, service improvement, and effective customer support, provided such interests are not overridden by your fundamental rights and freedoms.
- Consent: Where processing is based on your explicit consent (such as optional marketing communications), you retain the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Data Sharing & Disclosure
Sonic77 does not sell your personal data to any third party. We may share your data with the following categories of recipients in limited, controlled circumstances:
- Payment Processors and Financial Institutions: We share the minimum data necessary to process your deposits and withdrawals with approved payment service providers including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency processors. These providers process data under their own privacy policies and applicable financial regulation.
- Identity Verification Providers: KYC documentation may be shared with authorised third-party identity verification partners for the purpose of verifying your identity as required under our compliance obligations. These partners are contractually bound to process data only for this purpose.
- Technology Service Providers: We engage data processors for hosting, security monitoring, analytics, and customer support technology. All such processors are subject to written data processing agreements requiring them to maintain appropriate security standards and process data only on our instructions.
- Regulatory and Law Enforcement Authorities: We may disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, valid legal process, or to protect the rights and safety of Sonic77, its members, or third parties.
- Responsible Gambling Organisations: Where a member has voluntarily enrolled in a self-exclusion programme, limited data may be shared with relevant responsible gambling schemes to enforce the exclusion across participating platforms, where technically supported.
Your assurance: We do not share your data with advertisers, social media platforms, data brokers, or any other third parties for commercial profiling or marketing purposes. Data sharing is strictly limited to the operational and legal categories described above.
International Data Transfers
Sonic77 operates globally and some of our authorised data processors — including cloud infrastructure providers and KYC verification partners — may be located in jurisdictions outside Malaysia. Where personal data is transferred to a country that does not provide an equivalent level of data protection to that in Malaysia, Sonic77 will ensure that appropriate safeguards are in place to protect your information.
Such safeguards may include:
- Contractual clauses requiring the recipient to process data to a standard at least equivalent to that required under applicable data protection law.
- Transfers to jurisdictions that have been assessed as providing an adequate level of data protection.
- Adherence to internationally recognised data security frameworks such as ISO/IEC 27001.
You may request further information about the specific safeguards applied to any international transfer of your personal data by contacting our support team.
Data Retention
Sonic77 retains personal data for as long as is necessary to fulfil the purposes set out in this Policy, or as required by applicable law. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account membership, plus 5 years post-closure (AML regulatory requirement) |
| KYC identity documents | Minimum 5 years from date of submission or account closure, whichever is later |
| Financial transaction records | Minimum 5 years from the date of the transaction |
| Customer support communications | 3 years from the date of the final interaction |
| Technical and device logs | Up to 12 months from collection |
| Marketing consent records | Until consent is withdrawn, plus 1 year thereafter for audit purposes |
| Self-exclusion records | Duration of exclusion period plus 5 years |
At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our internal data destruction procedures.
Cookies & Tracking Technologies
Sonic77 uses cookies, web beacons, and similar technologies to support the operation and security of the platform and to understand how Members use the Service. We do not deploy third-party advertising or social media tracking cookies.
The cookies we use fall into the following categories:
- Strictly Necessary Cookies: Essential for the operation of the platform, including session management, authentication, and security. These cannot be disabled without affecting core functionality.
- Functional Cookies: Used to remember your preferences such as language settings, deposit method choices, and display options to personalise your experience on subsequent visits.
- Analytics Cookies: Used to collect anonymised, aggregated data on how Members navigate the platform, which pages are visited most frequently, and where errors occur. This data is used solely to improve the Service and does not identify you personally.
- Security Cookies: Used for fraud detection, account protection, and to identify and block suspicious activity on the platform.
You may manage your cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies may impair your ability to log in or use certain features of the Sonic77 platform.
Your Data Protection Rights
As a data subject, you hold the following rights in respect of your personal data processed by Sonic77. Requests may be submitted to our support team and will be acknowledged within 5 business days and responded to in full within 30 days:
Request a copy of all personal data Sonic77 holds about you, along with information about how it is used.
Request correction of any inaccurate or incomplete personal data held about you.
Request deletion of your personal data where it is no longer necessary, subject to legal retention obligations.
Request that we restrict processing of your data while a dispute about its accuracy or lawfulness is resolved.
Request a structured, machine-readable export of personal data you provided to us on the basis of consent or contract.
Object to processing carried out on the basis of legitimate interests, including direct marketing communications from Sonic77.
Withdraw consent for any processing activity based on consent, without affecting prior processing.
Lodge a complaint with the relevant data protection supervisory authority if you believe your rights have been infringed.
To exercise any of these rights, contact our Data Protection team via the live chat or email support channel. We will verify your identity before processing any data access or modification request to prevent unauthorised disclosure.
Data Security Measures
Sonic77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, accidental loss, or destruction. These measures include, but are not limited to:
- 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
- Encryption at rest for all sensitive data stored in our databases, including KYC documents and financial records.
- Role-based access controls ensuring that only authorised personnel can access specific categories of personal data, based on the minimum access necessary to perform their function.
- Two-factor authentication (2FA) for all internal staff accessing systems that contain personal data.
- Regular independent security audits and penetration testing of our platform infrastructure.
- Incident response procedures for detecting, containing, and notifying affected parties in the event of a personal data breach.
- Staff training on data protection obligations, phishing awareness, and secure data handling practices.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, Sonic77 will notify you without undue delay via the email address registered to your account, and will take prompt remedial action.
Your responsibility: While Sonic77 employs robust security measures on our side, you are responsible for keeping your login credentials confidential and for ensuring your device and browser software are kept up to date. Sonic77 will never ask for your password via live chat or email.
Children's Privacy
The Sonic77 platform is strictly intended for adults aged21 years and above. We do not knowingly collect, store, or process personal data belonging to any person under the age of 21. Age verification is a mandatory step during the account registration process.
If Sonic77 becomes aware that personal data has been collected from a person under 21 years of age without appropriate parental or guardian consent, we will take immediate steps to delete that data, close the associated account, and return any deposited funds to the originating payment method.
Parents and guardians who believe that their child may have accessed the Sonic77 platform are encouraged to contact our support team immediately via live chat or email so that the matter can be investigated and resolved promptly.
Amendments to This Policy
Sonic77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Where changes are material, we will provide advance notice to Members via in-platform notification or email prior to the updated policy taking effect.
The effective date and last reviewed date at the top of this document will be updated to reflect the date on which changes take effect. We encourage you to review this Policy periodically. Your continued use of the Sonic77 Service following notification of amendments constitutes acceptance of the revised Policy.
If you do not agree with any changes to this Policy, you may request account closure and the return of any verified real-money balance by contacting our support team.
Contact Us
For any questions, concerns, or formal requests relating to this Privacy Policy or the handling of your personal data, please contact the Sonic77 Data Protection team through the following channels:
Your Privacy Is in Good Hands
Sonic77 is built on transparency and trust. If you have questions about how we handle your data, our support team is available 24/7. For players aged 21 and above only.
Sonic77 promotes responsible gambling. For players aged 21 and above only. See our Responsible Gambling page for support resources.