Privacy Policy surga88 – Member Data Protection & Security

01 Introduction & Scope of This Policy

Surga88 is committed to protecting the privacy of every member who uses our platform. This Privacy Policy is designed to provide full clarity on our data collection and handling practices — without confusing technical language.

This policy applies to all users of the surga88 platform, including those accessing it via desktop web browser, Android and iOS mobile apps, and any other digital interface provided by surga88. It covers all data collected during the registration process, daily platform usage, financial transactions, and interactions with our support team.

If you have any questions about this policy or wish to exercise your privacy rights, you may contact our Data Protection team by email at [email protected] or via live chat within the platform. We are committed to responding to every inquiry within three business days.

02 Personal Data We Collect

Surga88 only collects data that is genuinely necessary to provide a safe, legitimate, and high-quality service. We do not collect excessive or irrelevant information beyond what is needed to operate the platform. Below is a summary of the types of data we collect:

Technical data such as IP addresses and device information is collected automatically when you access our platform. This information is not used to identify you personally on its own, but may be combined with other data for security and compliance purposes.

03 How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. surga88 uses your personal data solely for the following purposes:

• Account Management: Creating, verifying, and managing your player account, including the KYC process and identity verification required by law.
• Transaction Processing: Handling all deposits and withdrawals securely and accurately, including payment method verification and financial fraud prevention.
• Platform Security: Detecting and preventing unauthorised access, fraud, money laundering, and any activity that violates surga88's Terms and Conditions.
• Personalised Experience: Personalising content, game recommendations, and promotional offers based on your gaming habits and preferences.
• Service Communications: Sending important notifications related to your account, transactions, security updates, and policy changes.
• Customer Support: To understand and resolve queries, complaints, or technical issues you report to our team.
• Legal Compliance: Fulfilling legal obligations related to online gambling, anti-money laundering (AML), and reporting requirements to the relevant authorities.
• Platform Improvements: Analysing usage patterns to improve the performance, usability, and features of the surga88 platform.

04 Data Sharing & Disclosure

Surga88 does not sell or rent your personal data to any third party. However, in certain situations, we may need to share some of your data with specific parties to enable us to deliver a complete service:

• Payment Service Providers: Financial institutions, banks, and e-wallet providers that process your transactions. They receive only the minimum data necessary to complete the transaction.
• Game Providers: Gaming software companies that provide casino, slot, and sports games to the surga88 platform. Data shared is limited to game session identifiers only.
• Identity Verification Providers: Third-party KYC services used to verify your identity documents securely and efficiently.
• Legal Authority: surga88 will disclose required data to law enforcement authorities, courts, or regulatory bodies when mandated by a valid court order or legal provision.
• Professional Advisors: Lawyers, accountants, or auditors bound by strict professional confidentiality obligations.

All third parties we work with are required to sign strict data protection agreements and ensure their security standards meet or exceed those of surga88. We conduct regular reviews of the privacy practices of all our partners.

05 Cookies & Tracking Technologies

The surga88 platform uses cookies and similar tracking technologies to enhance user experience, maintain session security, and analyze usage patterns. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled as they are essential to platform operations.
• Functional Cookies: Saving your preferences such as preferred language, display settings, and account information to provide a more personalised experience.
• Analytics Cookies: Helps us understand how users interact with our platform — including the most frequently visited pages, time spent, and common navigation paths.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality of the surga88 platform. For more information on how to manage cookies, please refer to your browser's documentation.

06 Security & Data Protection

Surga88 continuously invests in the latest security infrastructure to ensure your personal data remains fully protected. The technical and organizational security measures we implement include:

• End-to-End Encryption: All data transmitted between your device and surga88 servers is encrypted using TLS 1.3 protocol with AES-256-bit encryption.
• Two-Factor Authentication (2FA): An additional security layer that protects your account from unauthorised access even if your password has been compromised.
• Real-Time Security Monitoring: A threat detection system that operates 24/7 to identify and respond to any suspicious activity.
• Regular Security Audits: Security audits conducted by independent third parties on a regular basis to identify and address any system vulnerabilities.
• Strict Access Control: Only authorised surga88 staff with a legitimate need may access member personal data — and every access is logged for audit purposes.
• Secure Data Backup: Your data is regularly backed up to a separate, secure location to ensure service continuity in the event of an emergency.

07 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international privacy best practices, you have the following rights regarding your personal data held by surga88:

To exercise any of the above rights, please contact our Data Protection team at [email protected] including your account number and request details. We will process your request within 30 calendar days. In complex cases, this period may be extended to 60 days with prior notice to you.

08 Child Data Protection

The surga88 platform is strictly for individuals aged 18 and above. We do not knowingly collect or store personal data from children or minors.

If you are a parent or guardian and become aware that your underage child has registered or is using the surga88 platform, please contact us immediately at [email protected]. We will investigate the report and take immediate action, including closing the account and deleting all associated data.

09 Data Retention Period

Surga88 retains your personal data for as long as your account is active and for a reasonable period after account closure, depending on the data category and applicable legal requirements:

• Active Account Data: Retained for as long as your account is active and for a minimum of 5 years after account closure, in accordance with anti-money laundering legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years for financial audit and tax compliance purposes.
• Security Logs: Retained for 12 months to assist with security incident investigations if required.
• Customer Support Records: Retained for 3 years for historical reference and service improvement.
• Marketing Data: Retained until you withdraw consent or request deletion.

Once the retention period expires, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered or reused.

10 Policy Amendments & Contact Us

Surga88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements, or other legitimate operational reasons. When we make significant changes, we will:

• Displaying a clear notice on the surga88 platform homepage.
• Sending a notification to your registered email at least 7 days before the changes take effect.
• Updating the "Last Updated" date at the top of this document.

Continued use of the surga88 platform after amendments take effect constitutes your acceptance of the updated policy. If you do not agree with any amendments, please stop using the platform and contact us to close your account.

For any inquiries, concerns, or requests relating to this Privacy Policy, you may contact us via:

• Privacy Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 within the surga88 platform