Official Documents

Privacy Policy surga77

Your privacy is our priority. This document transparently explains how surga77 collects, uses, stores, and protects your personal data when you use our platform.

Last Updated Date: 1 January 2026 Version: 2.5

Surga77's Six Core Data Protection Principles

Surga77 does not merely comply with privacy laws — we go beyond the minimum standards to ensure your data is in safe hands at all times.

256-bit SSL Encryption

All data transmitted between your device and surga77's servers is protected with industry-standard 256-bit SSL encryption. This means your information cannot be read by any third party during transmission.

Secure Data Storage

Your personal data is stored on servers protected by multi-layered firewalls, strict access controls, and continuous 24/7 security monitoring. Access to user data is restricted to authorised personnel only.

No Data Sales

Surga77 has never and will never sell your personal data to any third party for marketing or commercial purposes. Your data is used solely for platform operations and compliance with legitimate licensing requirements.

Full User Control

You have full rights to access, amend, download, or request deletion of your personal data. These requests are handled by our privacy team within the stipulated timeframe and at no charge.

International Standards Compliance

The surga77 privacy policy is drafted in accordance with internationally recognised data protection standards. We continuously update this policy in line with legislative changes and industry best practices.

Immediate Breach Notification

In the event of any security incident involving your data, surga77 will notify you within the timeframe stipulated by industry guidelines, along with the steps that have been and will be taken to protect you.

Important Note: By using the surga77 platform, you agree to the collection and use of data as described in this Privacy Policy. This policy applies in conjunction with Terms and Conditions surga77.

1 Introduction & Scope of This Policy

Surga77 ("we", "Platform") takes the responsibility of protecting personal data extremely seriously. This Privacy Policy explains in detail how we collect, process, store, and protect your personal information when you use our website, mobile app, and all services provided by surga77.

This policy applies to all users of the surga77 platform, including unregistered website visitors, registered members, and any individual who interacts with surga77's official communication channels.

By accessing or using the surga77 platform, you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.

Policy Scope: This policy covers all data collected through surga77.bio, the surga77 mobile app, customer support channels, and any digital interactions related to our platform.

2 Types of Personal Data We Collect

Surga77 only collects data that is strictly necessary to provide a safe, seamless service that complies with licensing requirements. The following are the categories of data we collect:

Data Categories Example Information Primary Purpose
Identity Data Full name, date of birth, identification number (MyKad/passport) KYC verification, licensing compliance
Contact Data Email address, phone number, residential address Account communications, transaction confirmations
Financial Data Bank account details, deposit and withdrawal transaction history Payment processing, fraud prevention
Technical Data IP address, device type, web browser, session data Security, platform improvements
Behavioural Data Game history, betting patterns, gaming preferences User experience improvements, responsible gaming compliance
Communication Data Live chat records, support tickets, inbound emails Customer service, complaint resolution

We may also collect data you provide voluntarily, such as feedback, reviews, or information shared when contacting our support team. All such data is processed on a lawful basis in accordance with contractual requirements, legitimate business interests, or legal compliance.

3 How We Use Your Data

The personal data we collect is used exclusively for the purposes stated and will not be used for any other purpose without your consent. The primary purposes of use are as follows:

  • Account Management: Creating, verifying, and managing your account on the surga77 platform, including KYC and age verification processes.
  • Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
  • Platform Security: Detecting and preventing fraud, money laundering, unauthorized access, and platform abuse.
  • Customer Service: Responding to inquiries, resolving complaints, and providing technical support.
  • Legal Compliance: Meeting licensing requirements, financial reporting, and other applicable legal obligations.
  • Platform Improvements: Analyzing usage patterns to improve the performance, interface, and overall experience of the surga77 platform.
  • Service Communications: Sending important account-related notifications, promotions you have subscribed to, and policy updates.
  • Responsible Gaming: Monitoring gameplay patterns to identify and support players who may need self-management assistance.

Marketing Communications: We only send promotional communications to you if you have given your consent. You may withdraw this consent at any time through your account settings or by contacting our team.

4 Data Sharing & Disclosure

Surga77 does not sell, rent, or trade your personal data to any third party. However, in certain situations, we may need to share your data with the following parties:

  • Payment Service Providers: DuitNow, FPX, Touch 'n Go, GrabPay, and Boost for transaction processing purposes. They are bound by strict data protection agreements with us.
  • KYC Verification Providers: Technical partners who assist us in verifying user identities in accordance with licensing requirements.
  • Security Providers: Companies that help us detect and prevent fraud and cybersecurity threats.
  • Regulatory Body & Law Enforcement: When required by law, court order, or the requirements of the relevant licensing authority.
  • Cloud Infrastructure Services: Hosting service providers that store our data in a protected and encrypted environment.

All third parties we work with are required to comply with data protection standards equal to or exceeding our own. We do not permit them to use your data for any purpose other than those specified in their service agreements with surga77.

Should surga77 be involved in a merger, acquisition, or asset sale, user data may be transferred as part of that process. You will be notified before your data becomes subject to a different privacy policy.

5 Data Storage & Retention Period

Surga77 retains your personal data for as long as necessary to fulfil the purposes stated in this policy, or for as long as required by law and licensing obligations. General retention period guidelines are as follows:

  • Active Account Data: Throughout the active period of your account and for the period following account closure as required by the licensing authority (typically 5–7 years).
  • Financial Transaction Records: Minimum 7 years from the transaction date for audit and financial legal compliance purposes.
  • Communication Records: 3 years from the date of communication, or longer if related to an unresolved support case or dispute.
  • Technical Log Data: 12 months for standard log data; longer if related to an ongoing security investigation.
  • KYC Documents: Throughout the active account period and for at least 5 years after account closure.

Once the retention period has expired, your data will be securely deleted or anonymised using methods that ensure the data cannot be recovered.

6 Data Security Measures

Surga77 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss, misuse, or disclosure:

  • Data Encryption: All data is encrypted in transit (SSL/TLS 256-bit) and at rest (AES-256) within our databases.
  • Strict Access Controls: "Least privilege" principle — only staff who genuinely require access to specific data are permitted to do so, and every access is logged and monitored.
  • Continuous Monitoring: Threat detection and security monitoring systems operate 24/7 to identify and respond to suspicious activity promptly.
  • Regular Security Testing: surga77 conducts regular penetration testing and security audits by independent third-party experts.
  • Two-Factor Authentication: Two-factor authentication (2FA) is available and encouraged for all users as an additional layer of account security.

Shared Responsibility: While we implement robust security measures, the security of your data also depends on your own actions. Please use a strong password, enable 2FA, and do not share your login credentials.

7 Cookies, Pixels & Tracking Technologies

Surga77 uses cookies and similar tracking technologies to enhance your experience on our platform. The types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login authentication and session security. Cannot be disabled.
  • Performance Cookies: Collecting aggregated data on how users interact with the platform to help us improve website performance and speed.
  • Functional Cookies: Remembering your preferences such as language, theme, and display settings to deliver a more personalized experience.
  • Analytical Cookies: Helping us understand overall usage patterns (not individual) to guide platform development decisions.

You can manage your cookie settings through your web browser at any time. Please note, however, that disabling essential cookies may affect the functionality of the surga77 platform. The cookies we use do not store your credit card details or password.

8 Your Rights Over Personal Data

As a surga77 user, you have the following rights regarding your personal data. All requests may be submitted via email to our privacy team:

Right to Access

You have the right to request a copy of the personal data we hold about you, including information on how it is used.

Right to Rectification

You have the right to request correction of inaccurate or incomplete data. Changes will be processed within 14 business days.

Right to Erasure

You have the right to request deletion of your data, subject to applicable legal retention and licensing requirements.

Right to Restrict Processing

In certain circumstances, you have the right to request that we restrict the processing of your data while an issue is being resolved.

Right to Data Portability

You have the right to receive your data in a structured, machine-readable format for transfer to another service if desired.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes or processing based on our legitimate interests.

To submit any request relating to your privacy rights, please contact the surga77 privacy team via email at [email protected]. We will process your request within 30 calendar days.

9 Child Data Protection

The surga77 platform is exclusively for individuals aged 18 years and above. We do not intentionally collect, process, or store personal data from minors.

If you believe we may have collected data from a minor without appropriate verification, please contact us immediately at [email protected]. We will take immediate action to investigate and delete the relevant data if the claim is verified.

Parents and guardians concerned about their children's use of the platform are advised to use parental control software and to have open discussions with their children about the risks of online gambling.

10 Privacy Policy Amendment

Surga77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. When material changes are made:

  • The "Last Updated" date at the top of this document will be updated.
  • A notification will be displayed within the platform upon your next login.
  • For significant amendments, we will send a notification email to your registered address.

We encourage you to review this Privacy Policy periodically. Your continued use of the surga77 platform after any amendments take effect will be considered your acceptance of the updated terms.

11 Contact Our Privacy Team

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

  • Privacy Email: [email protected]
  • General Support Email: [email protected]
  • Live Chat: Available 24/7 directly within the surga77 platform
  • Response Time: We aim to respond to all privacy inquiries within 5 business days

The surga77 privacy team speaks Bahasa Malaysia and English. You may submit your enquiry in any of those languages and we will reply in the same language.

Your Data is Safe — Now Let's Play

Surga77 ensures your privacy and data security are fully protected. Register today and enjoy a premium gaming experience with the peace of mind you deserve.

256-bit SSL Protected Data No Data Sales Secure KYC 24/7 Support
Bahasa Melayu