Surga888 Privacy Policy – Malaysia Member Personal Data Protection

1. Introduction

Surga888 takes seriously our responsibility to protect the privacy of every member using the surga888.vip platform. This Privacy Policy document explains in detail the types of personal information we collect, how it is used, with whom it may be shared, and your rights as the owner of that data.

By registering an account or continuing to use the Surga888 platform, you confirm that you have read and understood this Privacy Policy. We encourage you to read this document in full as it contains important information about how your personal data is managed by us.

Surga888 complies with relevant international data protection standards, including requirements relating to lawful data collection, clear purpose, secure storage, and individuals' rights to access their own data.

2. Types of Personal Data We Collect

Surga888 only collects personal data that is strictly necessary for the stated purposes. The following are the categories of data we may collect from you:

We do not collect sensitive data categories such as health information, religious beliefs, or political views unless you voluntarily provide them in the context of responsible gaming support.

3. How We Use Your Data

The personal data we collect is used only for lawful and stated purposes. Surga888 does not use your data for any other purpose without obtaining your consent beforehand, where required by law.

• Account management — to create, verify and maintain your account at Surga888.
• Transaction processing — to process deposits, withdrawals and any payments related to your activity on the platform.
• KYC and AML compliance — to fulfil legal obligations related to identity verification and anti-money laundering.
• Platform security — to detect, investigate and prevent fraud, unlawful activity or platform abuse.
• Customer support — to help resolve technical issues, account enquiries and any problems you encounter.
• Service communications — to send important notifications regarding your account, transactions and policy changes.
• Product improvement — to analyse usage patterns in order to improve overall platform performance and user experience.
• Responsible gaming — to monitor activity patterns that may indicate a need for support related to concerning gaming habits.

4. Sharing Information with Third Parties

Surga888 does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, there are limited situations where we may need to share your information with certain parties:

• Payment service providers — such as banks, e-wallet providers and card processors required to complete your financial transactions. They receive only the information necessary to process the relevant payment.
• Game software providers — game providers such as Pragmatic Play, Evolution Gaming and others may receive the technical data required to deliver gaming services to you.
• Regulatory authorities — in situations where we are required by law or court order to disclose information to government agencies or regulatory bodies.
• Audit and compliance firms — independent third parties conducting security and compliance audits on behalf of Surga888. They are bound by strict confidentiality agreements.

Every third party we share data with is bound by contractual obligations to protect your data to a standard no lower than this Privacy Policy.

5. Data Security & Protection Measures

Surga888 continuously invests in security infrastructure to ensure your personal data is protected against unauthorised access, loss, destruction, or improper disclosure. The following are the key protection layers we employ:

• 256-bit SSL encryption — all data transmitted between your web browser and Surga888 servers is encrypted using the latest TLS protocol. This ensures sensitive information such as login details and financial data cannot be intercepted in transit.
• Hashed password storage — your password is not stored in plain text. We use strong cryptographic hashing algorithms with a unique salt for each account.
• Internal access controls — only Surga888 staff with a legitimate business need are permitted to access member personal data, and every access is logged for audit purposes.
• Real-time threat monitoring — our systems continuously monitor for suspicious activity and can respond automatically to detected threats.
• Regular security audits — Surga888 conducts regular penetration testing and security audits by independent third parties to identify and address potential vulnerabilities.

6. Cookies & Tracking Technologies

Surga888 uses cookies and similar tracking technologies to enhance your user experience on our platform. Cookies are small text files stored on your device when you browse our website.

We use several categories of cookies:

• Essential Cookies — required for core platform functions such as maintaining your login session, saving language preferences and ensuring transaction security. These cookies cannot be disabled.
• Analytics Cookies — helps us understand how users interact with the platform, which pages are visited most frequently and where technical issues occur. This data is collected in aggregate and is not used to identify individuals.
• Functional Cookies — stores your personal preferences such as selected odds format, display settings and game preferences to deliver a more personalised experience on your next visit.
• Performance Cookies — helps us optimise platform load times and ensure a smooth experience across various device types and internet connections.

You can manage your cookie settings through your web browser settings. However, disabling essential cookies may affect certain features of the Surga888 platform.

7. Your Rights Over Personal Data

As a Surga888 member and owner of your personal data, you have several rights you may exercise at any time. Surga888 is committed to making it easy for you to exercise these rights:

To exercise any of the rights above, please contact our customer support team via Live Chat on the platform. We will process your request within 30 calendar days.

8. Data Retention Period

Surga888 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable laws and regulations.

• Active account data — retained for the duration your account is active plus any legally required period following account closure.
• Financial transaction records — retained for a minimum of 5 years to meet AML compliance and financial audit requirements.
• Support communication records — retained for 3 years for reference and dispute resolution purposes.
• Security and audit logs — retained for 2 years for security incident tracking and investigation purposes.
• Analytics cookie data — automatically deleted after a set period, typically between 30 days and 2 years depending on the type of cookie.

9. Changes to This Privacy Policy

Surga888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. The latest version of this policy will always be displayed on this page with a clear update date.

For material or significant changes to how we handle your personal data, we will provide reasonable notice through one of the following methods:

• In-platform notification when you log in to your Surga888 account.
• An email will be sent to the address registered with your account at least 7 days before the changes take effect.
• A prominent banner or notice on the surga888.vip homepage.

Your continued use of the Surga888 platform after notice is given and changes take effect indicates your acceptance of the updated Privacy Policy.

10. How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our team through the following channels:

• Live Chat — the fastest way to get an immediate response. Our team is available 24 hours a day, 7 days a week including public holidays. Click the Live Chat icon on the platform after logging in.
• Support Email — send your enquiry to [email protected]. Typical response time is within 24 business hours.

Surga888 is committed to addressing all privacy-related enquiries seriously and within a reasonable timeframe. Your satisfaction and trust are our priority.