Privacy Policy surga99 – Member Data Protection

Surga99 ("we", "Platform", or "surga99") is committed to protecting the privacy and security of the personal information of all our members. This Privacy Policy explains how we handle your personal data when you use the surga99 platform, browse our website at surga99.fun, or interact with the services we provide.

This policy applies to all registered surga99 members, website visitors, and any individual who interacts with our platform through any device or communication channel. By registering a surga99 account or continuing to use our platform, you are deemed to have read, understood, and agreed to the terms set out in this Privacy Policy.

Surga99 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and adheres to all applicable legal requirements relating to personal data protection in Malaysia. Any changes to this Privacy Policy will be published on this page and you will be notified via in-platform notifications.

Surga99 collects the personal information necessary to provide a secure, compliant, and fully functional platform service. We only collect data that is genuinely required and do not gather information beyond what platform operations need.

Data is collected through three main channels: directly from you during registration and platform use; automatically via tracking technologies as you browse the platform; and from approved third parties such as identity verification providers and registered payment processors.

Every piece of data collected by surga99 has a clear and legitimate purpose. We do not use your data for purposes unrelated to platform operations or not stated in this Privacy Policy without your prior consent.

• Account Management: Creating and managing your surga99 account, processing registration, login verification, and account recovery.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions carried out through the surga99 platform.
• Security & Fraud Prevention: Identifying and preventing suspicious activity, money laundering, and platform abuse.
• Legal Compliance: Fulfilling our obligations under PDPA 2010, KYC requirements, and applicable AML regulations.
• Customer Support: Providing technical assistance, resolving complaints, and answering your enquiries.
• Responsible Gaming: Monitoring gameplay patterns to identify potential gambling issues and provide appropriate assistance.
• Marketing Communications: Sending promotional information and exclusive offers – you may opt out at any time.
• Platform Improvement: Analysing usage patterns to improve the performance, design, and functionality of the surga99 platform.

Surga99 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We only share your data in limited and necessary circumstances as described below:

• Trusted Service Providers: Companies that help us deliver services such as payment processing, identity verification, cloud services, and technical infrastructure — all bound by strict confidentiality agreements.
• Game Providers: Game studios and content providers whose platforms are integrated into surga99 — only data necessary for functionality is shared.
• Legal Authority: Law enforcement agencies, regulatory bodies, or courts when we are required to do so under applicable Malaysian law.
• Fraud Prevention: Anti-fraud agencies and industry bodies that protect all platform users from financial crime.
• Business Transfer: Should surga99 be involved in a merger, acquisition, or asset transfer, data may be transferred with equivalent privacy protections maintained.

All third parties receiving your data from surga99 are required to comply with data protection standards at least equivalent to our own. We conduct thorough due diligence on all our data processing partners.

Surga99 invests seriously in data security infrastructure to ensure your personal information is always protected from unauthorized access, loss, misuse, or accidental disclosure.

• 256-bit SSL Encryption: All data transmitted between your device and surga99's servers is protected with industry-standard SSL encryption.
• Stored Data Encryption: Sensitive information such as passwords and financial data is stored in an encrypted format that cannot be read without the decryption key.
• Two-Factor Authentication (2FA): An additional security layer is available on all accounts to prevent unauthorised access.
• 24/7 Monitoring: Our cybersecurity team continuously monitors the platform to detect and respond to any threats.
• Strict Access Control: Only authorised surga99 staff with a legitimate operational need may access your personal data.
• Periodic Security Audits: Penetration testing and independent security audits are conducted regularly to identify and patch any vulnerabilities.

Surga99 uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and understand how members interact with our services. Cookies are small text files stored on your device when you browse the surga99 platform.

You can manage your cookie settings through your browser at any time. Please note that disabling certain cookies may affect specific functions of the surga99 platform, including the ability to log in and access your account. Marketing cookies can be declined without affecting core platform functionality.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have clear rights regarding the personal data held by surga99. We fully respect and facilitate the exercise of these rights.

To exercise any of the above rights, you may contact the surga99 data protection team by email at [email protected] or via Live Chat within the platform. We will process your request within the timeframe prescribed by law, typically no more than 30 calendar days.

Please note that some data deletion requests may not be fully fulfilled if we are legally required to retain that data — for example, financial transaction records that must be kept for a minimum period as mandated by the relevant authorities.

Surga99 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law. Retention periods vary depending on the type of data and legal requirements:

• Active Account Data: Retained for the duration your account is active, plus 7 years after account closure for legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in line with Malaysia's anti-money laundering legal requirements.
• Support Communication Logs: Retained for 3 years for dispute resolution and service improvement purposes.
• Game & Session Data: Retained for 2 years for responsible gaming and internal audit purposes.
• Security & Technical Logs: Retained for 12 months for security incident detection and investigation purposes.
• Marketing Data: Retained until you withdraw consent or for up to 3 years of inactivity.

Once the retention period expires or the processing purpose is no longer relevant, your data will be securely deleted or anonymised using procedures that ensure it cannot be re-linked to your identity.

Surga99 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. We are committed to informing you of any material changes in a transparent manner.

• Material changes will be announced via in-platform notifications at least 14 days before taking effect
• The "Updated" date at the top of this page will indicate the current version of the Privacy Policy
• Continued use of the platform after the effective date of any changes constitutes acceptance of the new terms
• Previous versions of the Privacy Policy are kept in an archive and can be requested if needed for dispute purposes

If you have any questions, concerns, or complaints regarding how surga99 handles your personal data, or if you wish to exercise any of your rights as stated in this Privacy Policy, please contact us through the following channels:

• Support Email: [email protected] – response within 24 hours on business days
• Live Chat Platform: Available 24/7 via the live chat button at the bottom corner of the surga99 platform
• Official Telegram: Contacted via the verified official surga99 Telegram account

We aim to respond to all privacy-related enquiries within 3 business days. For more complex data rights requests, the response period is up to 30 calendar days as provided under PDPA 2010.

If you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia (JPDP), the relevant regulatory body under the Ministry of Communications Malaysia.