Identity and Eligibility
sbotop may collect identity, age and address information to confirm that an account belongs to an eligible adult aged 21 or above and to conduct required verification checks.
This policy explains how sbotop collects, uses, protects, retains and discloses personal information when Malaysian adults browse the website or use account-related services.
These summaries highlight important sbotop privacy practices. The full clauses below provide the governing details and should be read carefully.
sbotop may collect identity, age and address information to confirm that an account belongs to an eligible adult aged 21 or above and to conduct required verification checks.
sbotop processes transaction records needed to manage MYR deposits and withdrawals, verify payment ownership, prevent fraud and resolve account enquiries.
sbotop applies administrative, technical and organisational safeguards designed to reduce unauthorised access, alteration, loss or misuse of personal information.
sbotop uses personal information for stated operational, legal, security and responsible gambling purposes rather than for unrelated activities without proper justification.
sbotop retains records only for as long as reasonably necessary for account services, disputes, fraud prevention, legal duties and legitimate business requirements.
Eligible sbotop users may request access, correction or other permitted action concerning their information, subject to identity checks and applicable legal limitations.
This Privacy Policy describes how sbotop handles personal information connected with website visits, account registration, identity verification, payments, sports betting, casino activity, customer enquiries and responsible gambling controls. It applies whenever sbotop determines how and why relevant personal information is processed.
By using sbotop, you acknowledge that personal information may be handled as explained in this policy. This acknowledgement does not remove any right available under applicable data protection law. Where consent is required for a particular activity, sbotop will seek that consent separately and allow it to be withdrawn where the law permits.
“Personal information” means information that identifies an individual or can reasonably be associated with an identifiable individual. It may include direct identifiers, account details, transaction records, online identifiers and inferences produced from account activity.
“Processing” includes collecting, recording, organising, storing, reviewing, using, disclosing, restricting, deleting or otherwise handling information. “User” means a person who visits sbotop, communicates with sbotop or holds an account. Aggregated information that no longer identifies a user may fall outside the definition of personal information.
The information collected by sbotop depends on how a user interacts with the website. Browsing generally requires less information than account registration, payment processing or a security investigation. sbotop may collect information directly from users, automatically from devices or from payment and verification partners involved in an authorised transaction.
| Category | Examples | Primary Purpose |
|---|---|---|
| Identity details | Name, date of birth, nationality and verification records | Eligibility, KYC, fraud prevention and legal compliance |
| Contact details | Email address, residential address and communication preferences | Account notices, support and service administration |
| Financial details | Masked bank or eWallet details, MYR transaction values and payment status | Deposits, withdrawals, ownership checks and disputes |
| Account activity | Login history, wagers, game use, bonuses, limits and self-exclusion records | Service delivery, security and responsible gambling |
| Technical details | IP address, browser, device type, operating system and timestamps | Website operation, diagnostics and abuse prevention |
| Communications | Support messages, complaints and verification correspondence | Responding to requests and maintaining accurate records |
sbotop asks users to provide only accurate information relating to themselves. Users must not submit another person's identity document, payment account or private correspondence unless legally authorised and specifically requested through an appropriate process.
sbotop processes personal information where necessary to provide requested services, administer an account, perform contractual obligations, comply with legal requirements, protect legitimate interests or act on valid consent. A particular record may support more than one compatible purpose.
sbotop may process information to:
Where sbotop relies on legitimate interests, those interests are assessed against the user's rights and reasonable expectations. sbotop will not use legitimate interests as a blanket justification for processing that creates disproportionate privacy effects.
Payment processing may involve information associated with DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank or Hong Leong when one of those methods is available. A reference in this policy does not guarantee that a particular sbotop payment option is currently supported.
sbotop may compare the account holder's identity with payment ownership records and may request supporting documents. Full payment credentials should never be sent through ordinary messages. sbotop may retain transaction references, masked account details, verification outcomes and records needed to resolve disputes or prevent financial crime.
sbotop may use cookies and similar local technologies to maintain sessions, remember essential preferences, support security and understand website performance. Certain cookies are necessary for requested functionality, while optional technologies should be controlled in accordance with applicable consent requirements.
Technical records may include an IP address, browser version, device category, operating system, referral path, viewed pages and event timestamps. sbotop uses these records to diagnose errors, reduce automated abuse and understand whether visitors in Kuala Lumpur, Penang, Johor Bahru or elsewhere can access content effectively.
Browser controls may allow cookies to be deleted or blocked. Blocking essential cookies may prevent some sbotop account or security functions from operating correctly.
sbotop does not disclose personal information merely because it may be commercially convenient. Information may be shared only where there is an appropriate purpose, a suitable legal basis and proportionate safeguards.
sbotop may disclose limited information to:
Service providers should receive only the information reasonably necessary for their assigned function. sbotop expects processors to apply confidentiality and security requirements appropriate to the nature of the data.
Online services may rely on infrastructure or specialist providers located outside Malaysia. As a result, sbotop information may be processed in another jurisdiction whose privacy rules differ from Malaysian requirements.
Where an international transfer occurs, sbotop will use appropriate contractual, organisational or legal safeguards according to the circumstances. Access should remain limited to authorised purposes, and the transfer does not remove the security and confidentiality responsibilities described in this policy.
sbotop keeps personal information for periods determined by the type of record, the account relationship, legal requirements, fraud risk and potential disputes. Closing an account does not always result in immediate deletion because transaction, verification, self-exclusion and complaint records may need to remain available.
When information is no longer reasonably required, sbotop may securely delete it, anonymise it or isolate it from ordinary operational use. Retention reviews are intended to prevent records from being kept indefinitely without a valid reason.
sbotop uses layered measures designed to protect confidentiality, integrity and availability. These measures may include access controls, authentication safeguards, encryption in appropriate contexts, monitoring, record segregation, staff confidentiality duties and incident-response procedures.
No website, network or storage method is completely secure. Users also play an important role by choosing a unique password, keeping devices updated, avoiding public-device logins and checking that account communications are genuine. sbotop cannot protect information that a user voluntarily discloses to an unauthorised person.
If a security event affects personal information, sbotop will investigate, contain and assess it. Notifications will be issued to affected individuals or competent authorities where required by applicable law.
Subject to applicable law and permitted exceptions, users may ask sbotop for access to personal information, correction of inaccurate information, restriction of particular processing or deletion where retention is no longer justified. A user may also object to certain processing or withdraw consent where consent is the governing basis.
sbotop may request identity verification before acting on a privacy request. This protects the account holder from unauthorised disclosure. Requests may be limited where fulfilling them would reveal another person's information, undermine security, conflict with legal retention duties or prejudice a legitimate investigation.
Users should provide enough detail to identify the relevant account and request. sbotop will respond within a reasonable period, taking account of complexity and applicable legal requirements.
sbotop may process betting patterns, deposit behaviour, session activity, limit settings, cooling-off requests and self-exclusion records to support responsible gambling safeguards. This information can help identify behaviour that may warrant a reminder, account restriction or direct intervention.
Responsible gambling records may be retained after closure where necessary to maintain a self-exclusion, prevent re-registration or demonstrate that sbotop acted on a protection request. Further information about available safeguards appears on the Responsible Gambling page.
sbotop casino-style services are intended only for adults aged 21 and above. sbotop does not knowingly permit an underage individual to create or operate an account. Age verification may be required before account functions or transactions are made available.
If sbotop discovers that personal information belongs to an underage person, the associated account may be suspended and the information handled according to legal, security and safeguarding requirements. Parents and guardians should use appropriate device controls and must not allow an underage person to access an adult account.
sbotop may update this policy to reflect changes in services, security practices, legal obligations or operational processes. The revised policy will appear on this page with an updated effective date. Material changes may also be communicated through an account notice where appropriate.
Users should review the sbotop Privacy Policy periodically. Continued use after an update does not replace any consent that applicable law requires sbotop to obtain separately.
Privacy questions, correction requests and data-rights enquiries may be sent to the sbotop website email shown below. The address is displayed as plain text for security and consistency.
Website email: [email protected]
Include the subject “Privacy Request” and a concise description of the issue. Do not include a password, one-time code or complete banking credential. sbotop may request suitable identity confirmation before discussing account information.
Return to the homepage to explore sbotop, or review the Terms and Conditions before using account-related services. Keep login details private and play responsibly. For players aged 21 and above only.