Introduction
Welcome to the surga99 Privacy Policy. We understand that privacy matters deeply to you, and we are committed to ensuring your personal data is always protected, handled responsibly, and used only for legitimate purposes.
This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of personal information you provide to us or that we collect when you use the Surga99 platform, including our website and mobile app.
By registering an account or using Surga99's services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any terms in this policy, please discontinue use of our platform.
Legal Basis: surga99's processing of your personal data is governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia, which regulates how organisations collect, process, and store the personal data of individuals in Malaysia.
Information We Collect
Surga99 collects various types of information depending on how you interact with our platform. Below is a detailed breakdown of the data categories we collect:
| Data Category | Type of Information | Collection Method |
|---|---|---|
| Identity | Full name, date of birth, gender, IC or passport number | Registration form, KYC process |
| Contact | Phone number, email address, residential address | Account registration, profile updates |
| Financial | Bank account details, e-wallet information, deposit and withdrawal history | Payment transactions |
| Technical | IP address, device type, operating system, web browser | Automatically during use |
| Activity | Game history, betting records, login activity | Automatically during gameplay |
| Communication | Customer support chat records, feedback | Live chat, support email |
We only collect data that is genuinely necessary to provide our services. Data minimization is central to Surga99's approach to privacy — if we don't need a piece of information, we don't ask for it.
How We Use Your Data
The personal data we collect is used for the following purposes, all of which have a valid legal basis under Malaysia's PDPA:
- Account management: Registering your account, verifying your identity through the KYC process, and enabling secure login to the surga99 platform.
- Transaction processing: Processing your deposits and withdrawals, verifying payments, and resolving any finance-related issues.
- Service provision: Displaying games, providing customer support, and ensuring a smooth gaming experience across all devices.
- Platform security: Detecting and preventing fraud, money laundering, system abuse, and cybersecurity threats.
- Regulatory compliance: Meeting legal requirements, reporting to relevant authorities when required, and conducting anti-money laundering (AML) checks.
- Service improvement: Analysing usage patterns to improve the platform, reduce response times, and deliver a better experience.
- Communication: Sending important account notifications, terms updates, and security alerts you need to stay informed.
surga99 does not use your personal data to make automated decisions that significantly affect your rights or interests without human intervention.
Sharing Data with Third Parties
Surga99 does not sell or transfer your personal data to third parties for marketing purposes. However, in the course of operating the platform, there are limited situations where data may need to be shared with trusted parties:
- Payment service providers: Licensed payment gateways that process your deposit and withdrawal transactions. They only receive the data necessary to process payments.
- KYC service providers: A third-party identity verification platform that helps us conduct the identity checks required by law.
- Game providers: Licensed gaming companies that provide slots, Live Casino, and other game content on our platform. Data shared is limited to what is necessary to run a gaming session.
- Regulatory authorities: Government or regulatory bodies with legal authority to request specific information.
- Cloud services and infrastructure: Server and cloud platform providers used to securely store and process data.
All third parties we work with are bound by strict data protection agreements and are required to maintain security standards equal to or exceeding those of surga99.
Note: surga99 is not responsible for the privacy practices of other websites or platforms you may visit through links provided. Please review the privacy policy of those platforms directly.
Data Storage & Security
The privacy and security of your personal data is surga99's top priority. We implement comprehensive technical and organisational security measures to protect your data from unauthorised access, loss, destruction, or improper disclosure.
- All data is stored in data centres equipped with high-grade physical and cybersecurity protections.
- Passwords are stored in hashed format using an irreversible algorithm.
- Databases are protected with encryption at rest using AES-256 standards.
- An active 24/7 monitoring system detects any suspicious access attempts in real time.
- Penetration testing is conducted regularly by independent security experts.
- A tested incident response procedure is in place and can be activated within one hour in the event of a threat.
Your personal data will be retained for as long as your account is active or as long as needed to provide services to you. After account closure, certain data may still be retained for a period prescribed by Malaysian law for regulatory compliance purposes, typically between five and seven years.
surga99 performs automatic daily data backups to ensure service continuity. All backup files are encrypted to the same security standard as primary data.
Cookies & Tracking Technologies
Surga99 uses cookies and similar tracking technologies to enhance your experience on our platform, understand how you interact with our content, and maintain the security of your login session.
There are several categories of cookies we use:
- Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
- Performance Cookies: Collecting information on how pages are used to help us improve platform speed and performance.
- Functional Cookies: Remembering your preferences such as language, region, and display settings to provide a more personalised experience.
- Analytics Cookies: Used to understand traffic patterns and user behavior for internal product improvement purposes.
You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the Surga99 platform. For more information on managing cookies in your browser, please refer to your browser's documentation.
Your Rights Regarding Personal Data
Under Malaysia's PDPA and Surga99's privacy commitments, you have the following rights regarding your personal data. To exercise any of these rights, please contact our customer support team.
Right of Access
You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 business days.
Right to Rectification
If your data is inaccurate or outdated, you have the right to request a correction. You can also update your account profile directly through your account settings.
Right to Erasure
In certain circumstances, you may request the deletion of your data. This right is subject to our legal obligations to retain certain records.
Right to Object
You may object to the processing of your data for specific purposes such as direct marketing. Objections will be enforced within a reasonable timeframe.
Right to Data Portability
You have the right to receive your personal data in a machine-readable format for transfer to another service provider if needed.
Right to Restriction of Processing
In certain circumstances, you may request that we restrict the processing of your data while a dispute is being resolved.
All privacy rights requests will be acknowledged within three business days and resolved within the timeframe stipulated by Malaysia's PDPA. We may require identity verification before processing your request.
Cross-Border Data Transfers
In some cases, your personal data may be transferred to, stored in, or processed outside Malaysia, particularly in connection with the cloud services and international server infrastructure we use.
When your data is transferred overseas, Surga99 ensures adequate protections are in place through the following mechanisms:
- Data transfer agreements containing standard data protection clauses.
- Transfers are made only to countries or entities with a level of data protection equivalent to or higher than Malaysia's.
- A risk assessment is conducted before any cross-border data transfer is approved.
Surga99 does not transfer your data to jurisdictions that lack adequate data protection laws without appropriate contractual safeguards in place.
Children's Privacy
The surga99 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.
If we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that information and close the associated account. Parents or guardians who suspect their child has registered on our platform are encouraged to contact our support team right away.
To Parents: If you suspect your child under the age of 18 has accessed the Surga99 platform, please contact our support team immediately via live chat. We will respond promptly.
Changes to This Privacy Policy
Surga99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service improvements. Any material changes will be communicated to you via a notice on the platform or by email at least seven days before they take effect.
The "Updated" date at the top of this page reflects the date this Privacy Policy was last modified. We encourage you to review this page periodically to stay informed about how we protect your information.
Your continued use of the surga99 platform after any amendments to this Privacy Policy are published will be considered your acceptance of those changes.
Contact Us About Privacy
If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, Surga99's privacy team is here to help.
You can reach us through the following channels:
- Live Chat: Available 24 hours a day, 7 days a week via the surga99 platform.
- Support Email: [email protected] — response within one to two business days.
- FAQ Page: Reference our FAQ page for answers to commonly asked privacy questions.
For data protection complaints that cannot be resolved with us, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP), the country's PDPA regulatory body.
surga99 is committed to handling all privacy-related enquiries and complaints with seriousness, professionalism, and within a reasonable timeframe. Your trust is our most valued asset.