Privacy Policy

Privacy Policy surga888
— Your Personal Data Protection

Surga888 takes every player's privacy seriously. This document clearly explains how we collect, use, store, and protect your personal data in accordance with applicable data protection laws.

Updated: 1 January 2026  |  Version 2.4

1 Introduction

Surga888 is committed to protecting the privacy of all its users. This Privacy Policy explains our practices regarding the collection, use, disclosure, and protection of your personal information when you use the surga888 platform — whether through our official website or mobile app.

By registering or using any surga888 service, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our platform. We encourage you to read this document in full to understand your rights and responsibilities regarding privacy.

Note: This Privacy Policy should be read together with the surga888 Terms and Conditions. Both documents form a comprehensive agreement between you and surga888 regarding your use of the platform and your personal data.

2 Data We Collect

Surga888 collects two main categories of data — information you provide directly and information collected automatically while you use the platform.

Information you provide directly:

  • Full name as shown on your official identity document.
  • Date of birth for age verification purposes.
  • Active email address and mobile phone number.
  • Full residential address including postcode and state.
  • Identity card number (MyKad) or passport number for KYC verification.
  • Bank account details, e-wallet, or other registered payment method information.
  • Copies of identity verification documents when required.

Automatically collected information:

  • IP address and approximate geographic location.
  • Device type, operating system, and web browser version.
  • Gaming activity history, including bets, deposits, and withdrawals.
  • Login and logout timestamps.
  • Cookie data and session identifiers.
Data Category Examples Primary Purpose
Identity Full name, date of birth, MyKad KYC Verification & Legal Compliance
Contact Email, phone number Account Communications & Notifications
Finance Bank account, e-wallet Deposit & withdrawal processing
Technical IP, device, browser Security & Fraud Detection
Usage Game history, betting Service improvement & personalization

3 How We Use Your Data

Surga888 uses collected data for legitimate, meaningful, and lawful purposes. Your data will not be used for any other purpose without your consent unless required by law.

  • Account management: Create, verify, and maintain your player account.
  • Transaction processing: Process deposits, withdrawals, and bonus payments securely.
  • KYC verification: Meet legal requirements related to identity verification and anti-money laundering compliance.
  • Platform security: Detect and prevent fraud, hacking, and suspicious activity.
  • Customer support: Assist you in resolving any technical issues or account-related inquiries.
  • Marketing communications: Send you the latest promotional offers and bonus updates — you may unsubscribe at any time.
  • Legal compliance: Fulfill legal obligations and respond to requests from authorized authorities.
Experience Personalization: surga888 uses your gaming activity data to recommend relevant promotions and games. This is solely to enhance your experience on the platform — no profiling that affects your rights is involved.

4 Data Sharing

Surga888 does not sell, rent, or trade your personal data to third parties for marketing purposes. However, there are limited situations where your data may be shared with trusted parties:

  • Payment service providers: DuitNow, local banks, e-wallet operators, and crypto payment processors require minimal data to complete transactions.
  • Identity verification providers: Our approved KYC partners for lawful age and identity verification purposes.
  • Technical service providers: Server hosting and cybersecurity companies that help us operate the platform securely.
  • Legal authorities: When required by a court order, warrant, or official request from a legitimate authority.
Our Guarantee: All third parties we work with are required to sign strict data confidentiality agreements. They are only permitted to use your data for specified purposes and must comply with data protection standards equivalent to those of surga888.

5 Data Storage & Security

Your data security is surga888's top priority. We deploy comprehensive layers of protection to keep your information safe from both external and internal threats.

  • All data is transmitted using 256-bit SSL encryption — the highest security standard in the industry.
  • Passwords are stored in hashed form using the bcrypt algorithm — we do not store passwords in plain text.
  • Sensitive financial data such as bank card numbers are stored in tokenised format and cannot be read by our staff.
  • Our servers are protected by multi-layered firewalls and real-time intrusion detection systems.
  • Internal and external security audits are conducted regularly every quarter.
  • Access to players' personal data within internal systems is restricted to authorised staff only.

Your personal data will be retained for as long as your account is active, or for the period required to fulfil legal obligations — typically no more than 7 years after account closure, in line with Malaysian regulatory requirements.

6 Cookies & Tracking Technologies

Surga888 uses cookies and similar tracking technologies to improve platform functionality, understand usage patterns, and deliver a better experience for you.

  • Essential cookies: Required for core platform functions such as login session verification and security. Cannot be disabled.
  • Performance cookies: Collect analytics data on how players use the platform for improvement purposes.
  • Functional cookies: Store your preferences such as language, time zone, and display settings.
  • Marketing cookies: Used to display relevant promotions based on your activity on the platform.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of some parts of the surga888 platform.

7 Your Rights

As a surga888 player, you have the following rights regarding your personal data. Any requests relating to these rights may be submitted to our support team:

👁️
Right of Access

You have the right to request a copy of all personal data we hold about you at any time.

✏️
Right to Rectification

If your data is inaccurate or incomplete, you have the right to request an immediate correction.

🗑️
Right to Erasure

You may request deletion of your data, subject to minimum legal retention obligations.

🚫
Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

📦
Right to Portability

You have the right to receive your data in a structured, machine-readable format for portability.

⏸️
Right to Restriction

In certain circumstances, you may request that we temporarily restrict the processing of your data.

8 Children's Data

The surga888 platform is strictly for individuals aged 18 and above. We do not knowingly collect, store, or process any personal data from individuals under the age of 18.

If we discover that a child's personal data has been collected without our knowledge, it will be deleted immediately and the associated account will be terminated. Parents or guardians who believe their child has registered on surga888 are urged to contact our support team immediately.

Child Protection: surga888 uses automated age checks and KYC verification to prevent registration by underage individuals. We take child protection extremely seriously.

9 Cross-Border Data Transfers

In the course of operating our global operations, your personal data may be transferred to and stored on servers located outside Malaysia. In all such transfers, surga888 ensures that protection equivalent to Malaysian and international standards is fully upheld.

  • All cross-border data transfers are protected by legally binding data processing agreements.
  • We only transfer data to jurisdictions with an adequate level of data protection.
  • Standard Contractual Clauses (SCCs) are applied where necessary to ensure your data remains secure in transit and at rest.

10 Privacy Policy Updates

Surga888 reserves the right to update this Privacy Policy from time to time in line with changes to laws, technology, or our business operations. Any material changes will be communicated to you via your registered email or a prominent notice on the platform at least 14 days before taking effect.

The "Updated" date at the top of this document indicates when this Privacy Policy was last reviewed. Continued use of the surga888 platform after the effective date constitutes acceptance of the updated policy.

11 Contact Us

If you have any questions, concerns, or wish to exercise your privacy rights, surga888's Data Protection Officer (DPO) team is ready to assist you through the following channels:

Email: [email protected]

Response time: Within 3 working days for all privacy enquiries.

Live chat: Available 24/7 on the surga888 platform for general inquiries.

Commitment surga888 Privacy

🔒
Highest-Level Encryption

All data moving between your device and surga888 servers is protected by 256-bit SSL encryption — the same standard used by leading banking institutions in Malaysia.

🏛️
Full Legal Compliance

Surga888 is fully compliant with Malaysia's Personal Data Protection Act (PDPA) 2010 and international privacy standards. Your data is managed within a clear legal framework.

🚫
No Data Sales

Surga888 has never and will never sell your personal data to advertisers, data brokers, or any third party for commercial purposes. Your data exists solely to improve your experience.

🧑‍💼
Dedicated Data Protection Officer

Surga888 has a dedicated Data Protection Officer (DPO) to ensure all data management practices comply with the law and that player rights are always protected.

🔍
Regular Security Audits

Our security and privacy systems are audited internally every month and by independent third parties every quarter to ensure there are no security gaps or data breaches.

⚡
Fast Privacy Issue Response

In the event of a data incident, surga888 will notify affected players within 72 hours and take immediate action to minimize any impact.

Join surga888 with Full Confidence

Your privacy is more than a promise — it is a core commitment of surga888. Register today and enjoy a safe, fair online gaming experience that fully respects your privacy.

Data protected by 256-bit SSL Malaysia PDPA Compliance No data sales Player rights guaranteed

Bahasa Melayu