Privacy Policy Surga77 –
Malaysia User Data Protection

1. Introduction & Our Commitment to Your Privacy

Surga77 is an online casino and sports betting platform operating under the domain surga77.bar. We understand that when you register and play with us, you are trusting us with your most valuable personal information. We take that trust very seriously.

This Privacy Policy clearly and transparently explains how Surga77 manages your personal data — from the moment you register through every transaction and gaming session you make. It covers the types of data we collect, why we need it, how it is used, who it may be shared with, and what rights you hold over your own data.

This policy is drafted in accordance with international data protection principles and reflects global iGaming industry best practices. We update this policy whenever there are changes to our operations or relevant regulations.

2. What Personal Data Do We Collect?

Surga77 only collects data that is strictly necessary to provide our services, ensure platform security, and comply with legal requirements. No data is collected excessively or without a clear purpose.

We do not collect sensitive information such as biometric data, medical records, or political views unless required by law under very limited specific circumstances.

• Data provided directly: Information you provide when registering, completing your profile, or contacting our support team.
• Automatically collected data: Technical information collected when you access the platform via a web browser or mobile app.
• Data from third parties: In certain cases, we may receive information from accredited third-party identity verification providers for KYC purposes.

3. How Do We Use Your Data?

Every piece of data we collect has a clear and legitimate purpose. Surga77 will not use your data for any purpose beyond the scope stated in this policy without obtaining your consent first.

• Account management: Creating, verifying, and maintaining your account while ensuring secure access to the platform at all times.
• Transaction processing: Processing deposits, withdrawals, and bonus payments quickly and securely using your preferred payment methods.
• Identity verification (KYC): Verifying your identity before your first withdrawal is processed, in line with compliance requirements and anti-money laundering (AML) laws.
• Service communications: Sending important notifications related to your account, transactions, promotions, and platform updates via email or SMS.
• Platform improvement: Analyzing usage patterns in aggregate to improve the performance, interface, and overall experience of the surga77 platform.
• Security monitoring: Detecting and preventing fraud, hacking, identity theft, and platform abuse in real time.
• Responsible gaming: Monitoring gameplay patterns to identify players who may be at risk and offering appropriate self-management tools.
• Legal compliance: Fulfilling legal and regulatory obligations related to the operation of an online gambling platform.

4. Data Sharing & Disclosure

Surga77 does not sell, rent, or trade your personal data to any third party for commercial purposes. This is our absolute commitment. However, there are limited situations where data sharing may occur, and all of these are clearly outlined here.

• Approved service providers: We work with trusted service providers such as payment processors, KYC providers, and cloud infrastructure partners that help us operate the platform. All such parties are bound by strict data protection agreements.
• Legal requirement: We may be required to disclose your information to authorities or regulatory bodies when ordered by a court or applicable law.
• Fraud prevention: In cases where fraud, money laundering, or serious security threats are suspected, relevant information may be shared with law enforcement authorities.
• Business transfer: In the event of a merger, acquisition, or transfer of Surga77 assets, user data may be transferred as part of the business assets, subject to continued privacy protections.

5. Security & Protection of Your Information

Protecting your personal data from unauthorized access, loss, or misuse is surga77's highest priority. We continuously invest in the latest security technology and procedures to keep your information safe at all times.

• 256-bit SSL encryption: All data transmitted between your device and Surga77's servers is encrypted using industry-standard TLS/SSL protocols, ensuring no third party can intercept your communications.
• Secure data storage: Your personal data is stored in databases protected with high-level encryption and strict access controls. Only authorised personnel have access to these systems.
• Two-factor authentication (2FA): 2FA is available for all user accounts and is strongly recommended as an additional layer of security at login.
• Real-time threat monitoring: An intrusion detection system (IDS) and suspicious activity monitoring operate continuously to identify and respond to security threats in real time.
• Regular security audits: The Surga77 platform undergoes periodic security audits by independent cybersecurity experts to identify and address any system vulnerabilities.
• Incident management: Surga77 has a comprehensive incident response procedure. In the event of a data breach, you will be notified within the timeframe required by applicable law.

6. Cookie Policy & Tracking Technologies

The Surga77 platform uses cookies and similar tracking technologies to enhance your experience, ensure smooth platform functionality, and analyze usage patterns in aggregate. This section explains the types of cookies we use and how you can manage them.

• Required cookies: These cookies are essential for the platform's core functions such as login, session security, and navigation. The platform will not function properly without them and they cannot be disabled.
• Performance cookies: These cookies help us understand how users interact with the platform — the most frequently visited pages, time spent, and errors encountered. All information is collected anonymously.
• Functional cookies: These cookies allow the platform to remember your preferences such as language, region, and display settings to deliver a more personalized experience.
• Analytics cookies: Used to analyse platform traffic and aggregate usage patterns for continuous improvement purposes.

You can manage or delete cookies through your web browser settings at any time. Please note, however, that disabling certain cookies may affect the functionality and user experience of the Surga77 platform.

7. Your Rights Over Personal Data

As a Surga77 user, you have clear and enforceable rights over your personal data. Surga77 fully respects these rights and provides straightforward mechanisms for you to exercise them.

To exercise any of the above rights, please contact our Data Protection Officer by email at [email protected]. We will process your request within 30 business days.

8. Data Retention Period

Surga77 does not retain your personal data longer than necessary for the stated purposes or as required by law. Retention periods vary by data category and operational requirements.

• Active account data: Retained for the duration your account remains active, plus any additional period required to resolve outstanding transactions or claims.
• Financial transaction data: Transaction records are kept for a minimum of 5 years from the transaction date, in line with financial regulations and AML compliance requirements.
• KYC and identity verification data: Identity verification documents are retained for 5 years after account closure to meet regulatory requirements.
• Communication logs: Customer support communication records are retained for 2 years for reference and dispute resolution purposes.
• Technical data and logs: System logs and technical data are retained for 12 months for security and technical troubleshooting purposes.

Once the retention period expires, your data will be securely deleted or anonymized using industry-standard procedures. Anonymized data may be retained for long-term analytics purposes without any link back to your identity.

9. Changes to This Privacy Policy

Surga77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform improvements. When material changes are made, we will take the following steps to keep you informed.

• The "Updated" date at the top of this page will be revised to reflect the date of the latest version.
• For material and significant changes, we will send a notification to your registered email address.
• Change notices will be displayed on the platform's home page for at least 7 days before the changes take effect.
• Continued use of the platform after a change notice is considered your consent to the updated policy.

10. Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding how Surga77 handles your personal data, we strongly encourage you to contact us directly. Our team is ready to provide a thorough and comprehensive response.

You may contact the Surga77 Data Protection Officer (DPO) through the following channels:

• Privacy email: [email protected] — for specific inquiries regarding your personal data and privacy rights.
• General support email: [email protected] — for general questions about the platform and your account.
• Live Chat 24/7: Available directly on the Surga77 platform for immediate assistance at any time.
• Telegram: @Surga77Support — for faster and easier communication.

We are committed to responding to all privacy-related inquiries within 5 business days and resolve any issues within 30 business days of receipt. Your satisfaction is our priority.