Surga99 Privacy Policy – Malaysia Personal Data Protection

This Privacy Policy ("Policy") describes how surga99 ("we", "surga99") collects, uses, discloses, and protects your personal information when you register for and use our online gaming platform at surga99.ws.

By registering a surga99 account or using any of our services, you confirm that you have read, understood, and accepted the terms of this Privacy Policy. If you do not agree with any part of this Policy, please discontinue use of the surga99 platform and contact us to close your account.

This Privacy Policy applies to all members using the surga99 platform, whether via the website or any mobile application operated by surga99. It covers all surga99 services including Live Casino, slots, poker, lottery, cricket, live sports matches, and all other available game categories.

Surga99 collects several categories of personal data to enable us to provide gaming services that are safe, fair, and compliant with regulatory requirements. Below is a full breakdown of the data we collect:

Surga99 collects your personal data through several different channels. It is important that you understand these data collection sources so you can make informed decisions about the information you share with us.

• Upon Registration: When you complete the surga99 account registration form, you provide your identity and contact information directly to us. This includes your name, Malaysian phone number, and email address.
• KYC Verification Process: When you submit identity documents such as a copy of your MyKad for identity verification, particularly before high-value withdrawals are processed.
• Financial Transactions: Payment account information is collected when you make a deposit or request a withdrawal via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX.
• Gaming Activity: The surga99 system automatically records all gaming activity, including bets placed, games played, and session outcomes. This is necessary to ensure fairness and to resolve any disputes.
• Cookie & Tracking Technology: The surga99 platform uses cookies and similar technologies to collect technical data about how you use our platform. This information helps us improve platform performance and security.
• Support Communications: When you contact surga99 customer support via live chat, email, or phone, we record those communications for quality assurance and issue resolution purposes.

Surga99 uses your personal data solely for legitimate purposes directly related to the provision of our online gaming services. We do not use your data for any purposes not stated in this Privacy Policy without first obtaining your consent.

• Account Management: Creating and managing your surga99 account, processing logins, and maintaining account security.
• Transaction Processing: Securely process deposits and withdrawals in MYR via your preferred local Malaysian payment methods.
• Identity Verification (KYC): Conducting the necessary Know Your Customer (KYC) checks to prevent fraud and money laundering.
• Gaming Service Provision: Enabling you to access all surga99 games and maintaining game records for dispute resolution purposes where necessary.
• Customer Support: Identify you when you contact the surga99 customer support team and provide more effective assistance.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, or security breaches on the surga99 platform.
• Legal Compliance: To comply with regulatory requirements, court orders, or lawful requests from the relevant Malaysian authorities.
• Service Communications: Send important notifications relating to your account, transactions, changes to terms, and promotional information (if you have agreed to receive marketing communications).

Surga99 does not sell your personal data. However, in certain limited and legitimate circumstances, we may need to share your personal data with trusted third parties. All such data sharing is subject to strict data protection agreements.

• Payment Processors: Information required to process transactions is shared with payment service providers such as Malaysian banking institutions, Touch 'n Go eWallet operators, GrabPay, and DuitNow solely for the purpose of processing your transactions.
• Gaming Technology Providers: Minimum technical information required is shared with the gaming platform providers used by surga99 for operational purposes. All such providers are bound by data confidentiality agreements.
• Malaysian Authorities: surga99 will disclose personal data to Malaysian government authorities or law enforcement agencies if lawfully ordered to do so by a court or relevant regulatory body.
• Fraud Investigation: In cases where there is reasonable suspicion of fraudulent activity or serious financial crime, surga99 reserves the right to share relevant information with the appropriate authorities without prior notice to you.

Surga99 continuously invests in security infrastructure to ensure your personal data is protected to the highest standard. Below are the security layers we have put in place:

While surga99 takes all reasonable precautions, no system is 100% immune to cyber threats. As such, we also require your cooperation in keeping your own surga99 account login credentials secure.

The surga99 platform uses cookies and similar tracking technologies to enhance user experience, analyse platform performance, and ensure the security of your gaming sessions. Below are the types of cookies we use:

You can manage and delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the surga99 platform and could prevent you from logging in or playing properly.

As a surga99 member, you hold several important rights regarding your personal data, which we respect and are committed to facilitating. Below are your rights and how to exercise them:

Surga99 is an online gaming platform strictly for adults aged 18 and above. We expressly prohibit the use of the surga99 platform by anyone under the age of 18.

Surga99 does not knowingly collect personal data from individuals under the age of 18. The surga99 registration system is designed to verify the applicant's age before an account is approved. Should we discover that a minor's personal data has been inadvertently collected, we will take immediate steps to delete it.

The surga99 platform may from time to time contain links to third-party websites or services, such as sports news links providing context for Malaysia Super League or EPL matches. surga99's Privacy Policy applies only to the surga99.ws platform and services we directly operate.

Surga99 is not responsible for the privacy practices or content of third-party websites that may be linked from our platform. We encourage you to read the privacy policy of each website you visit separately. The presence of a link to another website on the surga99 platform does not imply our endorsement or validation of that site's content or privacy practices.

In operating a gaming platform that relies on international technology infrastructure, your personal data may be transferred to and stored on servers located outside Malaysia. surga99 ensures that any such cross-border data transfers are carried out with adequate protections in place.

All cross-border data transfers by surga99 are governed by binding data processing agreements and technical safeguards that meet or exceed the standards required under Malaysian data protection law. We only work with service providers that comply with internationally recognised data security standards.

If you have any questions, concerns, or requests regarding surga99's Privacy Policy or the handling of your personal data, our team is ready to assist. We are committed to responding to all privacy enquiries thoroughly and within a reasonable timeframe.

• Privacy Email: privacy@surga99.ws — for all enquiries and requests relating to personal data rights.
• General Support Email: support@surga99.ws — for account issues and general surga99 customer support.
• Response Time: We aim to respond to all privacy enquiries within 3–5 business days. Formal data rights requests will be addressed within 14 business days in accordance with established procedures.

For information on frequently asked questions about the surga99 platform, please visit the Frequently Asked Questions us. To understand your rights relating to responsible gaming, please visit the Responsible Gaming. This document should be read in conjunction with Terms & Conditions surga99.