Privacy Policy Surga88 — Our Commitment to Protecting Your Data

Surga88 is an online casino platform operating exclusively for the Malaysian market. As a platform that handles players' financial and personal data, we understand the sensitivity of the information you entrust to us. That trust is the foundation of our relationship with each of our 200,000+ active members in Malaysia.

This Privacy Policy ("Policy") describes how surga88 collects, uses, stores, protects, and — under very limited circumstances — shares your personal information. This Policy applies to all users of the surga88 platform, including website visitors, registered members, and VIP members at all tiers.

We wrote this Policy in plain, easy-to-understand English because we believe transparency means every Malaysian player, regardless of their educational background, can fully understand what happens with their data. No confusing legal jargon, no hidden clauses.

Surga88 collects various types of information depending on how you interact with our platform. The following are the categories of data we may collect:

Data You Provide Directly

• Registration information: full name, Malaysian phone number, email address, date of birth, and password (stored in encrypted form).
• Identity verification documents: a copy of your MyKad or Malaysian passport (required when verifying your account or processing withdrawals).
• Payment information: details of the deposit and withdrawal methods you use — DuitNow, FPX (Maybank2u, CIMB Clicks), Touch 'n Go eWallet, GrabPay, Boost, or ShopeePay. We do not store your full bank account number.
• Customer support communications: records of conversations, emails, and any information you share when contacting our team.

Automatically Collected Data

• Platform usage data: games played (slots, roulette, poker, cricket, live casino, virtual sports), betting history, and account activity.
• Device and network information: IP address, device type, operating system, browser type, and general location data.
• Cookie and session data: information about how you browse and use the surga88 platform.
• Transaction logs: a complete record of all deposits, withdrawals, and bets in your account.

Surga88 uses collected data for legitimate and necessary purposes in the operation of the platform. We do not use your data for purposes unrelated to the services we provide. The following are the specific purposes for which data is used:

• Account Management: Creating and managing your account, verifying your identity, processing registration, and maintaining accurate account records.
• Financial Transaction Processing: Processing deposits via DuitNow, FPX, Touch 'n Go, GrabPay, Boost, and ShopeePay, and settling withdrawal winnings to your bank account or e-wallet.
• Gaming Services Provision: Allows you to access and play all surga88 games, including slots, roulette, poker, cricket, Malaysia Super League football betting, virtual sports, and Live Casino.
• VIP Programme & Rewards: Calculating and crediting VIP points, cashback, and bonuses based on your gameplay activity.
• Security & Fraud Prevention: Detecting and preventing fraud, money laundering, duplicate accounts, and any activity that violates surga88's Terms & Conditions.
• Legal Compliance: Fulfilling applicable legal and regulatory obligations, including anti-money laundering (AML) and know your customer (KYC) requirements.
• Customer Support: Responding to enquiries, resolving complaints, and providing technical support to players in Bahasa Melayu.
• Platform Improvement: Analysing usage patterns to improve the user experience, fix bugs, and develop new features relevant to Malaysian players.
• Service Communications: Sending important account-related notifications, promotions you have opted into, and policy updates — with your consent.

Surga88 does not sell, rent, or share your personal data with third parties for their own marketing purposes. However, in certain limited and controlled circumstances, we may need to share data with the following parties:

• Payment Service Providers: E-wallet providers and FPX services such as DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, Maybank2u, and CIMB Clicks receive the transaction data necessary to process your payments. These providers have their own privacy policies and are subject to confidentiality agreements with surga88.
• Game Software Providers: Third-party game providers that partner with surga88 may receive game data necessary to operate the games. No personally identifiable information is shared unless strictly required.
• Competent Authorities: surga88 will disclose data to law enforcement authorities, regulatory bodies, or courts when required by law or a valid court order.
• Audit & Compliance Body: Independent auditors verifying the fairness of games and surga88's regulatory compliance may access the data required for audit purposes within a secure and controlled environment.
• Business Merger or Acquisition: If surga88 undergoes a merger, acquisition, or asset sale, user data may be transferred as part of that business transaction. You will be notified before your data becomes subject to a different privacy policy.

Surga88 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, damage, or accidental disclosure. Our security infrastructure is designed to provide layered protection at every stage of data processing.

• Data Transfer Encryption (In-Transit): All communications between your device and surga88 servers are protected by TLS (Transport Layer Security) protocol and 256-bit SSL encryption — the same standard used by Malaysia's leading banking institutions.
• Encryption of Data at Rest: Sensitive data stored in the surga88 database is encrypted using robust encryption algorithms. Your account password is never stored in plain text — it is hashed using a secure cryptographic method.
• Internal Access Controls: Access to players' personal data is strictly limited to surga88 staff with a legitimate business need. All access is logged and monitored. The principle of least privilege is enforced across the entire organisation.
• 24/7 Security Monitoring: The surga88 system is continuously monitored to detect any suspicious activity, intrusion attempts, or security anomalies. Our security team responds to any incidents promptly.
• Two-Factor Authentication (2FA): surga88 supports and encourages the use of two-factor authentication for player accounts as an added layer of protection against unauthorised access.
• Regular Security Testing: The surga88 platform undergoes regular security assessments and penetration testing by independent security experts to identify and address any vulnerabilities.

While we take all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. If you suspect your account has been compromised, please contact the surga88 support team immediately at support@surga88.casino.

Surga88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the surga88 website.

You can manage your cookie settings through your browser preferences. However, disabling certain cookies may affect how the surga88 platform functions — particularly cookies required to maintain your login session. surga88 does not use third-party cookies for advertising or cross-site tracking purposes.

As a surga88 player, you have the following rights regarding your personal data. surga88 is committed to respecting and facilitating the exercise of all these rights in a practical manner and at no additional cost in most circumstances.

The surga88 platform is strictly for adults aged 18 and above. We do not knowingly collect, process, or store the personal data of individuals under the age of 18. This is a commitment we take extremely seriously as part of our responsible gaming obligations.

Surga88 uses multiple mechanisms to verify player age, including Malaysian phone number verification, date of birth checks at registration, and identity verification via official documents where required. Any account found to have been registered by an underage individual will be closed immediately, and all associated funds will be handled in accordance with the relevant legal compliance procedures.

Parents and guardians are encouraged to use parental control software on shared devices to prevent children from accessing online gambling sites, including surga88.

As an online platform, your personal data may be stored and processed on servers located outside Malaysia in some circumstances — for example, when using cloud infrastructure providers or international gaming software services.

When such data transfers occur, surga88 ensures that:

• Transfers are only made to countries or organisations that provide an adequate level of data protection equivalent to or higher than Malaysian standards.
• Data recipients outside Malaysia are bound by data transfer agreements that include internationally recognised standard protection clauses.
• 256-bit SSL encryption is maintained throughout all cross-border data transfers without exception.
• surga88 retains full control and responsibility over your data even after it has been transferred to third-party providers.

If you would like to learn more about the mechanisms we use for international data transfers, please contact us at support@surga88.casino.

Surga88 may update this Privacy Policy from time to time to reflect changes in our privacy practices, applicable laws, or the way we operate. We are committed to keeping our players informed about how we handle their data.

• The "Last Updated" date at the top of this document will always reflect the latest version of the Privacy Policy.
• For significant changes that materially affect how we process your data or reduce your privacy rights, we will send a notification to your registered email address at least 14 days before the changes take effect.
• For minor changes that do not materially affect your privacy rights, we will display a notice within the platform and update the document date.
• Continued use of the surga88 platform after any Privacy Policy changes take effect will be considered acceptance of the updated terms.

If you have any questions, concerns, or complaints regarding surga88's Privacy Policy or how we handle your personal data, our team is ready to help. We are committed to responding to all privacy enquiries in a timely and respectful manner.

To exercise your privacy rights, report a potential privacy breach, or simply enquire about your data, you can reach us through the following channels: