Official Surga88 Documents

Surga88 Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Members

Surga88 respects the privacy of every member. This Privacy Policy clearly explains what data we collect, why we need it, how it is stored securely, and your rights as a member to control your own personal information.

Last Updated: January 2026 256-bit SSL Bahasa Melayu
Encrypted Confidential Secure Protected Securely Stored
Encryption
256-bit SSL
Data Sales
Never
Data Retention
Secure Servers
Retention Period
5–7 Years (AML)
Privacy Support
Available 24/7

Surga88's Six Data Protection Principles

How Surga88 keeps your personal information safe, confidential, and in your control at all times.

PRINCIPLE #1
Minimum Data Collection

Surga88 only collects information that is strictly necessary to operate the platform and comply with legal requirements. We do not collect data that is excessive or unrelated to platform operations. This principle of "data minimisation" is the foundation of our privacy policy.

PRINCIPLE #2
Bank-Grade Encryption

All data transmitted between your device and Surga88 servers is protected by 256-bit SSL encryption — the same technology used by major Malaysian banking institutions such as Maybank and CIMB. This means your information cannot be read even if it is intercepted during transmission.

PRINCIPLE #3
No Sale of Personal Data

Surga88 has never and will never sell, rent, or trade members' personal information to any third party for marketing or commercial purposes. Your data belongs to you — we only retain it for the purposes you agreed to at registration, and nothing more.

PRINCIPLE #4
Full Rights for Members

You have the full right to access, correct, or request the deletion of your personal information at any time. Such requests can be submitted through Surga88 support and will be processed within 14 business days in accordance with applicable data protection requirements.

PRINCIPLE #5
Storage on Secure Servers

Surga88 member data is stored on servers equipped with multi-layered access controls, enterprise-grade firewalls, and intrusion detection systems (IDS) that operate 24 hours a day. Physical access to the data centre is restricted to authorised personnel only.

PRINCIPLE #6
Immediate Breach Notification

In the event of any security breach that may affect members' personal data, Surga88 is committed to notifying affected members within 72 hours of detection, along with the steps being taken to address the situation.

This Privacy Policy explains how Surga88 collects, uses, stores, and protects the personal information of members on our platform. By registering for or using Surga88 services, you agree to the terms of this Privacy Policy. For inquiries, contact us at support@surga88.run.

1 Information We Collect

Surga88 collects two main categories of information — details you provide directly, and information collected automatically as you use our platform.

1.1 Information You Provide Directly

  • Registration Information: Full name (as per MyKad or valid identification document), active Malaysian phone number, email address, date of birth, and account password.
  • Identity Verification: A copy of your MyKad or valid identity document, a selfie for facial verification purposes, and any additional supporting documents required for anti-money laundering (AML) compliance.
  • Financial Information: Bank account or e-wallet details (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) used for deposits and withdrawals. We do not store full credit or debit card numbers.
  • Support Communications: Message content, emails, and live chat conversation records between you and the Surga88 support team.

1.2 Information Collected Automatically

  • Technical Data: IP address, browser type, operating system, screen resolution, time zone, and internet service provider (ISP) name.
  • Usage Data: Pages visited, time spent in each section of the platform, clicks and interactions, and navigation paths within the platform.
  • Game Session Data: Records of every gaming session — including date, time, game type, bet amount, and outcome — are retained for audit purposes and dispute resolution.
  • Transaction Data: A complete history of all deposits, withdrawals, bonuses received, and other financial activity in your account.
Data Type Collected At Primary Purpose
Name & IC Number Registration & KYC Identity verification, AML
Phone No. Registration OTP, support communications
Email Registration Notifications, official communications
E-wallet/Bank Details Add payment method Deposits & withdrawals
IP Address Every login Security, fraud detection
Game records Each session Audit, dispute resolution

2 How We Use Your Data

Surga88 only uses your personal information for purposes you have consented to or that are legally required to operate the platform. These purposes include:

Account Management & Identity Verification
Creating and managing your account, verifying identity for legal compliance, and processing account-related requests including password resets and information updates.
Financial Transaction Processing
Processing deposits via Touch 'n Go, GrabPay, FPX, DuitNow, Boost, and ShopeePay, as well as withdrawals to registered accounts. Transaction records are retained for audit and AML compliance purposes.
Fraud Prevention & Security
Detect and prevent fraudulent activity, money laundering, unauthorized access, and violations of our terms of use. This includes monitoring transaction patterns and unusual account activity.
Customer Support
Responding to inquiries, resolving disputes, and providing technical assistance. Support interaction records are retained to ensure service continuity and quality improvement.
Platform Communications
Sending important account notifications, terms updates, security information, and (with your consent) promotional offers relevant to your activity on Surga88.
Platform Analytics & Improvement
Analyses usage patterns on an aggregated, anonymised basis to improve the Surga88 platform experience. Individual data is not used in this analysis — only aggregated data that cannot be attributed to any identifiable person.

3 Sharing Information with Third Parties

Surga88 does not sell or share members' personal information with third parties for marketing or commercial purposes. However, there are limited situations where data sharing is necessary and legally justified:

3.1 Trusted Service Providers

Surga88 works with carefully selected third-party service providers to handle specific technical aspects of the platform, including payment processing (payment gateways for FPX and e-wallets), server hosting and security services, and platform analytics tools. All such providers are bound by strict confidentiality agreements and are only permitted to use the data required for their specific services.

3.2 Legal Requirements

Surga88 may be required to disclose member information to the relevant authorities in the following circumstances:

  • Upon a valid court order or lawful legal directive.
  • To meet anti-money laundering (AML) reporting requirements with the relevant authorities.
  • Where there is reasonable belief that disclosure is necessary to prevent crime or protect public safety.
  • To defend Surga88's legal rights in court proceedings.

Surga88 never shares member data with marketing entities, third-party data companies, or any party without a legitimate need to access it. Every external data access request is subject to strict scrutiny before any information is shared.

4 Data Security

Surga88 continually invests in cybersecurity infrastructure to keep member data protected at all times. Key security measures we have in place include:

  • Data Encryption in Transit: SSL/TLS 256-bit encryption for all communication between your browser and Surga88 servers. No sensitive data is transmitted in plain text.
  • Data Encryption at Rest: Sensitive data such as bank details and identity information is stored in encrypted form in our database.
  • Multi-Factor Authentication (MFA): Surga88's internal systems that access member data require multi-factor authentication for all staff.
  • Role-Based Access Control: Each Surga88 staff member only has access to the data necessary for their specific job responsibilities — there is no blanket access to all member data.
  • Regular Security Audits: Penetration testing and security audits conducted by independent third parties are carried out on a regular basis to identify and address vulnerabilities.
  • 24/7 Monitoring: Advanced threat detection systems monitor the Surga88 infrastructure around the clock to identify any suspicious activity.

While Surga88 takes all reasonable steps to protect your data, no digital security system can guarantee 100% protection. We encourage members to play their part by using strong passwords, keeping login credentials confidential, and promptly reporting any suspicious account activity to Surga88 support.

5 Cookie Policy

Surga88 uses cookies and similar tracking technologies to enhance the user experience and support platform functionality. Cookies are small text files stored on your device when you visit our platform.

You can manage or delete cookies at any time through your browser settings. Please note that deleting essential cookies may affect the functionality of the Surga88 platform. Optional cookies can be disabled without impacting core platform features.

6 Data Retention and Deletion

6.1 Retention Period

Surga88 retains members' personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable law if a longer retention period applies. In general:

Data Type Retention Period Purpose
Active account information For the duration of the active account Platform operations
Financial transaction records 7 years after the transaction AML & tax compliance
Game session logs 5 Years Audit & disputes
KYC verification documents 5 years after account closure AML legal requirements
Customer support records 3 years Service quality
Analytics cookie data 13 months Usage analytics

6.2 Data Deletion Upon Request

Once the mandatory retention period has lapsed, or upon a valid member request (subject to legal requirements), Surga88 will securely delete your personal data using methods that ensure it cannot be recovered. To request data deletion, contact us at support@surga88.run with the details of your request.

7 Your Rights as a Member

As a Surga88 member, you have the following rights regarding your personal data. All requests relating to these rights can be submitted through Surga88 support and will be processed within 14 business days.

Right to Access
You have the right to request a copy of all personal data we hold about you, including transaction records and account activity history.
Right to Rectification
You have the right to correct any personal information that is inaccurate or incomplete. Updates can be made directly through your account settings or by contacting support.
Right to Erasure
You may request the deletion of your personal data, subject to applicable data retention legal requirements (such as AML records that must be kept for 5–7 years).
Right to Restrict Processing
Under certain circumstances, you may request that Surga88 restrict the processing of your data while a dispute or review is pending resolution.
Data Portability Rights
You have the right to receive a copy of your personal data in a machine-readable format (such as CSV or JSON) for transfer to another service provider.
Right to Withdraw Consent
You may withdraw consent for optional data processing (such as marketing emails) at any time through your account settings or by contacting support.

8 Protection of Children's Data

The Surga88 platform is exclusively for individuals aged 18 and above. We do not intentionally collect personal data from minors. Should we discover that data has been collected from anyone under the age of 18, we will take immediate action to delete that data and close the account in question.

Parents or guardians who believe their child has registered a Surga88 account without authorization should contact us immediately at support@surga88.run. We will investigate and close the account in question, and delete all associated data within 48 hours of receiving the report.

9 Links to Third-Party Services

The Surga88 platform may contain links or integrations with third-party services such as payment gateways (to facilitate deposits via Touch 'n Go, GrabPay, FPX, and others). When you leave the Surga88 platform and access these third-party services, you are subject to their respective privacy policies, not the Surga88 Privacy Policy.

Surga88 is not responsible for the privacy practices of third-party services and encourages you to review the privacy policy of each service you use to process your financial transactions. We only work with payment providers that have an established reputation and a verified security track record.

10 Changes to the Privacy Policy

Surga88 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or the services we offer. When we make significant changes, we will:

  • Updating the "Last Updated" date at the top of this document.
  • Send notifications to all registered members via email or in-platform alerts.
  • Providing at least 7 days' notice before changes take effect, except for security-related changes that require immediate action.

Continued use of the Surga88 platform after the effective date of any changes constitutes acceptance of the updated policy. It is each member's responsibility to review the policy change notifications we send out from time to time.

Current version: 3.1 — Updated on 1 January 2026. Previous versions are archived and available upon request through Surga88 support.

11 Contact Us for Privacy Matters

Surga88 has appointed a data protection officer responsible for ensuring compliance with this Privacy Policy. Any privacy-related inquiries, concerns, or requests may be submitted through the following channels:

Privacy & Data Protection Email
support@surga88.run
Live Chat (Bahasa Melayu)
Available on the platform – 24/7
Privacy Request Response Time
Within 14 business days

When submitting a privacy-related request by email, please include your account number (or registered email address) and the type of request (access, correction, deletion, etc.) so we can process it promptly and accurately.

Why This Privacy Policy Matters to Surga88 Players in Malaysia

Many online players in Malaysia don't give much thought to the privacy policy of the platforms they use — until something goes wrong. We get it. But in the online gaming industry, where you're sharing financial and personal identity information, understanding how a platform handles your data isn't optional — it's essential.

Surga88 stores several categories of sensitive member information — IC numbers, bank account or e-wallet details such as Touch 'n Go and GrabPay, transaction history, and gaming records. In the wrong hands, this data could cause serious harm. That is why we invest in robust security infrastructure — not merely for regulatory compliance, but because we are accountable to the Malaysian player community that trusts us.

One concern we hear from new players is whether their information will be sold to advertisers or shared with third parties. Our answer is clear and final: no. Surga88 has never sold, and will never sell, member data to any third party for marketing purposes. If you receive a promotional email from Surga88, it is because you opted in during registration — and you can unsubscribe at any time, easily.

For players who actively bet on Malaysian Super League football, EPL, badminton, MPL e-sports, or slots on Surga88 — your gaming activity records are stored in our system. This is not about monitoring you; it serves purposes that genuinely benefit you. Should a dispute arise over a game result or payout, these records serve as evidence that protects your interests, not the other way around. We use them to resolve complaints fairly and transparently.

On the topic of cookies — we know most people click "Accept All" without reading a thing. At Surga88, we separate cookies into essential and optional categories. Essential cookies keep the platform running properly — login sessions, security, and basic preferences. Optional cookies, such as analytics, can be turned off in your browser settings without affecting the platform's core functions. We respect your choice.

Understanding the rights held by every Surga88 member regarding their data is equally important. You have the right to request a copy of all data we hold about you, to correct any inaccurate information, or to request deletion of your data once your account is closed — subject to legal requirements for retaining financial records. This is not merely a promise — it is a commitment you can act on at any time by contacting our support team.

Finally, Surga88 encourages all members to use a strong, unique password for their account, never share login credentials with anyone, and report immediately if they suspect any suspicious activity on their account. Data security is a shared responsibility — we protect on the platform side, and you protect on the account side. Together, we can ensure a safe and enjoyable gaming experience at Surga88.

FAQ – Surga88 Privacy Policy

Answers to the most frequently asked questions about data protection and privacy at Surga88.

Not at all. Surga88 does not sell, rent, or share members' personal information with any marketing company or third-party commercial entity. Your data is used solely for platform operational purposes — processing deposits via Touch 'n Go or FPX, managing your account, providing customer support, and meeting legal requirements. The only instances where data is shared are with technical service providers bound by strict confidentiality agreements, or when required by law.

All sensitive financial information — including bank account details, Touch 'n Go, GrabPay, Boost, ShopeePay, and DuitNow account numbers — is protected with 256-bit SSL encryption during transmission and stored in encrypted form in our database. We do not store full credit or debit card numbers; only encrypted tokens are used to process recurring transactions. Access to members' financial information within our internal systems is restricted to authorized finance personnel only, with multiple layers of access controls in place.

Yes, you have the right to request deletion of your personal data. Requests can be submitted by email to support@surga88.run or via Live Chat. However, it is important to understand that certain data is legally required to be retained — specifically financial transaction records (7 years) and identity verification documents (5 years after account closure) for compliance with anti-money laundering (AML) laws. Other data such as optional marketing preferences, platform settings, and expired service logs may be deleted upon request. All deletion requests will be processed within 14 business days.

Surga88 is committed to notifying affected members within 72 hours of detecting a security breach, in line with industry best practices for data protection. Notifications will include details on the type of data potentially affected, the steps taken and currently underway to address the situation, and recommended actions for members to take (such as changing passwords or monitoring their financial accounts). Surga88 will also report incidents to the relevant authorities in accordance with applicable legal requirements.

You can stop receiving promotional emails from Surga88 in two simple ways: first, click the "Unsubscribe" link found at the bottom of any promotional email you receive; or second, log in to your Surga88 account, go to Account Settings, navigate to Communication Preferences, and disable the promotional email option. Changes will take effect within 48 hours. Please note that withdrawing consent for promotional emails does not affect official account communications such as deposit confirmations, withdrawal notifications, and important security alerts — you will continue to receive those.

Your Data is Safe. Your Gaming is Fun.

Now that you know how Surga88 protects your privacy — sign up with confidence and enjoy an online casino and Sports Betting platform built specifically for Malaysians. Your privacy is protected, your gaming is guaranteed.

Data Protected
256-bit SSL
No Data Sales
Fast Withdrawals
24/7 Support
Local Payments
Related Documents – Read Alongside This Privacy Policy

This Privacy Policy should be read together with Terms & Conditions and pages Responsible Gaming Surga88, all of which together form the complete agreement between you and the platform. In the event of any conflict between these documents regarding privacy matters, this Privacy Policy shall prevail. For any questions relating to privacy or data protection, please contact us at support@surga88.run.

Bahasa Melayu