Surga99 Privacy Policy – Protecting Your Personal Data

01Introduction & Scope

Welcome to the surga99 Privacy Policy. This document transparently explains how surga99 ("we", "the platform", or "surga99") collects, uses, discloses, and protects your personal information when you use the surga99.onl website, the surga99 mobile app, and all services we offer.

This Privacy Policy applies to all users of the surga99 platform, including visitors who have not registered an account, registered members, and former members who have closed their accounts. By using the surga99 platform, you agree to the data collection and usage practices described in this document.

We understand that your trust is surga99's most valuable asset. That is why we never take lightly our responsibility to protect every member's privacy. Every decision regarding your data is made with your security and best interests as the top priority.

02Data Collected

Surga99 collects various types of information when you use our platform. The table below outlines the categories of data we collect, along with their sources and purposes:

We only collect data that is genuinely necessary to provide surga99's services to you. We do not collect excessive or irrelevant data unrelated to platform operations.

03Purpose of Data Use

Surga99 uses the data collected for lawful and transparent purposes. The following is a complete list of the primary purposes for which your personal data is used:

• Account Management: Creating and managing your surga99 member account, including the registration process, login, and identity verification.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and efficiently.
• Legal Compliance : Meeting legal requirements related to KYC, AML, and financial reporting to the relevant authorities.
• Platform Security: Detecting and preventing fraud, suspicious activity, money laundering, and unauthorised account use.
• Customer Support: Providing effective technical support and customer service when you contact the surga99 support team.
• Platform Improvements: Analysing usage patterns to improve the gaming experience, user interface, and overall performance of surga99.
• Marketing Communications: Sending promotional information, bonus offers, and platform updates — only to members who have given consent to receive such communications.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate assistance to members who need it.

04Data Sharing

Surga99 does not sell, rent, or trade your personal data to any third party. However, in certain limited situations, we may need to share your information with the following parties:

• Payment Service Providers: Required transaction information is shared with trusted payment processors such as FPX, e-wallet providers, and banks to facilitate the processing of deposits and withdrawals.
• Game Software Providers: Minimum game data required is shared with software providers supporting the surga99 platform for technical purposes only.
• Legal Authorities: surga99 will disclose personal data when required by law, court order, or a lawful request from a regulatory or enforcement agency.
• Identity Verification Services: KYC information is shared with authorised third-party identity verification service providers to meet compliance requirements.
• Audit Partners: In the event of an audit required by a regulatory authority, relevant data may need to be shared with appointed independent auditors.

All third parties working with surga99 are required to comply with strict data security standards and are only permitted to use your data for specific, pre-agreed purposes.

05Data Security

Protecting your personal data is the highest priority for surga99. We implement multiple layers of technical and organisational security to ensure your data remains safe at all times:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and surga99 servers.
• Passwords are stored using irreversible one-way hashing — we cannot read your password ourselves.
• Two-factor authentication (2FA) is available for all member accounts as an added layer of security.
• Continuous 24/7 security monitoring with an automated intrusion detection system.
• Access to members' personal data within surga99's internal systems is restricted to staff with a legitimate need who have completed data security training.
• Regular security audits are conducted by independent third parties to ensure surga99 systems consistently follow industry best practices.

06Cookies & Tracking Technologies

Surga99 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
• Preference Cookies: Saving your preferences such as language, display settings, and favourite game selections for a smoother return experience.
• Analytics Cookies: Helping us understand how members use the surga99 platform so we can improve our services. This data is collected in aggregate and does not identify individuals.
• Security Cookies: Identifying suspicious login attempts and fraudulent activity to protect your account.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality of the surga99 platform. Continued use of the surga99 platform after a cookie notification means you agree to the use of cookies as described above.

07Data Retention Period

Surga99 retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law. General data retention guidelines are as follows:

• Active Account Data: Retained for as long as your account is active and for several years after account closure for legal compliance purposes.
• Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with accounting and anti-money laundering legal requirements.
• KYC Documents: Retained for the period prescribed by applicable compliance regulations, typically five (5) to seven (7) years.
• Security Log: Retained for the period required for security investigation and compliance purposes.
• Marketing Data: Retained until you withdraw consent to receive marketing communications from surga99.

Once the specified retention period has elapsed, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered.

08Your Rights

As a surga99 member, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

• Right of Access: You have the right to obtain a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data, subject to our legal obligations.
• Right to Restriction: You may request that we restrict the processing of your personal data under certain circumstances.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability: You may request your data in a machine-readable format for transfer to another service provider.

To exercise any of the rights above, please contact the surga99 customer support team via live chat or email. We will endeavour to process your request within 30 business days. For complex cases, this period may be extended, and you will be notified accordingly.

09Cross-Border Data Transfers

In operating the surga99 platform, your personal data may be processed or stored on servers located outside Malaysia. When this occurs, surga99 ensures that such data transfers are carried out with adequate safeguards in place, including:

• Contractually binding data transfer agreements with all recipient parties.
• Ensuring that the recipient country or region maintains an equivalent or higher level of data protection.
• Use of recognised standard contractual clauses for data protection in international transfers.

Surga99 ensures that the level of protection afforded to your data remains consistent regardless of the physical location where it is processed or stored.

10Children's Privacy

The surga99 platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we discover that a minor's personal data has been collected without our knowledge, the account in question will be immediately closed and all associated data will be deleted.

11Third-Party Links

The surga99 platform may contain links to third-party websites or services in certain contexts. The surga99 Privacy Policy does not apply to those third-party websites or services. surga99 is not responsible for the privacy practices or content of third-party websites.

We encourage you to read the Privacy Policy of every website you visit, especially before providing any personal information. Your safety and privacy outside the surga99 platform are your own responsibility.

12Privacy Policy Changes

Surga99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or service operations. When significant changes are made, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying in-platform notifications on surga99 about changes that occur.
• In the event of significant changes, we may send a notification directly to your registered email address.

Your continued use of the surga99 platform after a revised Privacy Policy is published constitutes your acceptance of the updated version. We encourage you to review this page periodically to stay informed about how we protect your privacy.

13Contact Us

If you have any questions, concerns, or complaints regarding surga99's Privacy Policy or how we manage your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom-right corner of the surga99 platform.
• Privacy Email: [email protected]
• General Support: [email protected]
• FAQ: Visit page FAQ us for answers to frequently asked questions about privacy and account security.

We are committed to responding to all privacy-related enquiries in a timely manner. For requests relating to your personal data rights, we will endeavour to respond within 30 business days from the date the request is received.