Sona101 takes your privacy seriously. This document clearly explains the types of data we collect, how it is used, who can access it, and your rights as a registered member under the Malaysian Personal Data Protection Act 2010 (PDPA).
A summary of the key commitments we make to every member regarding the protection of your personal data.
All personal data processing at sona101 complies with the Personal Data Protection Act 2010 (PDPA) Malaysia. We ensure your data is collected, stored, and used within the legal boundaries set by the Malaysian government.
Every communication between your device and sona101's servers is protected by 256-bit SSL encryption — the same security standard used by major Malaysian financial institutions and banks. Your data is never transmitted unencrypted.
Sona101 has never sold, rented or transferred members' personal data to third parties for marketing or commercial purposes, and never will. Your data belongs to you, and we protect it the same way we would want our own data protected.
As a sona101 member, you have full rights to request a copy of the personal data we hold, correct any inaccurate information, and request deletion of your data in certain circumstances. The process is straightforward and can be done through our customer support.
Sona101 does not retain your personal data for longer than is necessary for the stated purposes or as required by Malaysian law. Data from inactive accounts will be deleted once the relevant legal retention period has expired.
In the event of any data security breach that may affect your personal information, sona101 is committed to notifying you and the relevant authorities within the timeframe required under Malaysian law.
Under PDPA 2010, you have the following rights regarding your personal data at sona101.
You have the right to request a copy of all personal data sona101 holds about you. We will provide this information within 21 business days of receiving your request.
If personal data held by sona101 about you is inaccurate or incomplete, you have the right to request an immediate correction. Please contact our customer support with the correct information.
Under certain circumstances, you may request that sona101 delete your personal data. Such requests are subject to legal record-keeping obligations, which may prevent immediate deletion.
You have the right to object to the processing of your personal data for specific purposes such as direct marketing. sona101 will cease such processing within 14 days of receiving your request.
You have the right to receive your personal data in a machine-readable format for the purpose of transferring it to another service provider, to the extent that this is technically feasible.
To exercise any of the rights above, contact the sona101 team via email at support@sona101.my or through 24/7 live chat. Please clearly include your account number and the nature of your request.
This Privacy Policy ("Policy") is published by sona101, an online entertainment and betting platform operating in Malaysia. It describes how sona101 collects, uses, stores, protects, and discloses the personal information of members who use our platform.
Sona101 operates in full compliance with the Personal Data Protection Act 2010 (PDPA), Malaysia's primary legislation governing the processing of personal data. We take this responsibility seriously — not merely as a legal obligation, but as a reflection of our core values: transparency and genuine respect for every sona101 member.
Important Note: By registering an account or using the sona101 platform, you agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.
This policy applies to all information collected through the sona101 website at sona101.my, our mobile app, and any communication channel between you and the sona101 team, including live chat, email, and WhatsApp.
When you register an account on sona101 or interact with our platform, you provide the following data directly:
When you use the sona101 platform, our systems automatically collect technical data to ensure smooth and secure operations:
| Data Category | Example | Primary Purpose | Legal Basis |
|---|---|---|---|
| Identity Data | Name, IC, Date of birth | Account verification, KYC | Legal obligation |
| Contact Data | Email, Phone number | Communications, OTP, support | Contract performance |
| Financial Data | Payment method, Transaction history | Deposit/withdrawal processing | Legal obligation |
| Technical Data | IP, Browser, Device | Security, fraud detection | Legitimate interests |
| Gaming Data | Betting history, RTP | Platform operations, compliance | Contract performance |
| Marketing Data | Promotional preferences | Offer personalisation | Consent (withdrawable) |
Sona101 uses your personal data for the following purposes, which are lawful under the PDPA 2010:
With your consent, sona101 may send marketing communications including promotional information, bonus offers, platform news, and VIP programme updates. You may withdraw this consent at any time through your account settings or by contacting the sona101 support team. Withdrawing consent for marketing communications will not affect your use of the platform.
sona101's Data Minimisation Principle: We only collect data that is genuinely necessary for the stated purpose. If a piece of data is not needed, we do not collect it. This is a core principle we uphold in every system design decision.
Sona101 does not sell, rent, or trade members' personal data to any third party for commercial or marketing purposes. This is an absolute commitment we will never compromise on.
In the following limited circumstances, sona101 may need to share your personal data:
sona101 never shares your personal data with advertising companies, data brokers, or any party not directly involved in the platform's operations. If you receive a communication claiming to be from sona101 that appears suspicious, contact us immediately at support@sona101.my.
Sona101 implements multiple layers of technical security to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure:
While sona101 implements all reasonable security measures, no system can be guaranteed 100% secure. In the event of a data security breach that may affect your rights and freedoms, sona101 is committed to notifying you within the timeframe required under applicable Malaysian law, and will take immediate steps to contain the impact of the breach.
Sona101's primary servers are hosted in data centres that meet international physical and digital security standards. Backup data is stored at separate locations with strict access controls. sona101 does not store members' personal data outside the Asia region unless required for the processing of specific international payment transactions.
Sona101 uses cookies and similar tracking technologies to enhance user experience, maintain platform security, and understand how members use our services. This section outlines the types of cookies we use and how you can manage them.
As a data subject under the Personal Data Protection Act 2010 (PDPA) Malaysia, you have enforceable rights against sona101 regarding your personal data. Below is a detailed explanation of those rights and how to exercise them.
You have the right to request a copy of the personal data sona101 holds about you. Data access requests can be submitted by email to support@sona101.my with the subject line "Data Access Request". sona101 will fulfil the request within 21 business days upon verification of your identity. sona101 reserves the right to charge a reasonable fee for repeated or excessive data access requests.
If you find that personal data held by sona101 is inaccurate, incomplete, or out of date, you may request a correction by contacting our customer support team. Corrections will be made within a reasonable timeframe, and where a correction request is declined, sona101 will notify you of the reasons.
You may object to the processing of your personal data for direct marketing purposes at any time. To do so, uncheck the marketing options in your sona101 account settings, or email support@sona101.my stating that you wish to opt out of all marketing communications. Your opt-out request will be processed within 14 business days.
To submit any request relating to your privacy rights or to raise a complaint about how sona101 handles your personal data, please contact sona101's Data Protection Officer via:
If you are not satisfied with sona101's response, you have the right to lodge a complaint with the Personal Data Protection Department of Malaysia (JPDP) under the Ministry of Communications and Digital.
Sona101 takes the protection of children and young people seriously. The sona101 platform is strictly for individuals aged 21 and above. sona101 does not knowingly collect or store personal data from anyone under the age of 21.
Should sona101 discover that personal data has been collected from an individual under the age of 21 without valid parental or guardian consent, we will take immediate steps to delete that data and close the account in question. Parents and guardians are encouraged to monitor their children's device usage.
If you believe your child under the age of 21 has registered an account at sona101, please contact us immediately at support@sona101.my. We will handle the matter promptly and in strict confidence.
Sona101 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or service improvements. All amendments take effect on the date stated in the updated version.
For significant amendments, sona101 will notify members via their registered email or in-platform notification at least 14 days before the changes take effect. This gives you sufficient time to review the updates and make an informed decision about continued use of the platform. Continued use of sona101 after the effective date of any amendment will be considered your acceptance of the updated Privacy Policy.
All previous versions of this Privacy Policy are retained by sona101 and can be made available upon a valid request. If you wish to review a prior version or have questions about recent changes, please contact our support team.
Sona101 has appointed a Data Protection Officer responsible for ensuring compliance with this Privacy Policy and handling all privacy-related enquiries from members. For any matters concerning your privacy and personal data protection at sona101, please contact us via:
The sona101 team communicates in both Bahasa Melayu and English. We are committed to responding to all privacy-related enquiries within 48 business hours. For enquiries that require more in-depth investigation, we will provide an update within 7 business days.
For issues relating to Responsible Gaming involving your personal gaming data, our dedicated team is available with the highest confidentiality standards. We understand how sensitive this can be, and every case will be handled with full respect and discretion.
For more information about Terms & Conditions for sona101 platform usage relating to privacy and member responsibilities, please refer to our full Terms & Conditions document.
The most frequently asked questions from members regarding personal data protection at sona101.
Sona101 protects your privacy with top-tier encryption, PDPA 2010 compliance, and a firm commitment to never selling your data. Join over 500,000 Malaysian members who play safely and securely.