Privacy Policy Surga77 – Personal Data Protection for Malaysian Members

Your personal data is a trust we take very seriously. This document transparently explains how Surga77 collects, uses, stores, and protects your information β€” as well as your rights as a member.

Last Updated: 1 January 2026 Comply with International Data Protection Standards
πŸ”’
SSL 256-bit
Full Encryption
🚫
No Data Sales
To Third Parties
πŸ‘€
Right to Erasure
Upon Request
πŸ›‘οΈ
PDPA Compliance
Data Protection Act

Surga77's 6 Data Protection Principles

This is more than a legal formality β€” it is Surga77's genuine commitment to every Malaysian member who places their trust in our platform.

🎯
Purpose-Driven Data Collection

Surga77 only collects data that is strictly necessary for the specific purposes disclosed to you. We do not collect excessive information unrelated to the services you use on our platform.

πŸ”
Bank-Grade Security

All data is stored on secure servers protected by 256-bit SSL encryption β€” the same technology used by Malaysian financial institutions such as Maybank and CIMB. Access to your data is strictly restricted and controlled.

🚫
No Sale of Personal Data

Surga77 has never and will never sell, rent, or trade your personal data to any third party for commercial purposes. Your data belongs to you β€” not to us as a business asset.

βœ…
Explicit Consent Required

Any use of your data beyond the scope of core services requires your explicit consent beforehand. You may withdraw your consent at any time by contacting us or through your account settings.

🧾
Full Transparency in Data Use

We clearly explain every type of data collected, why it is collected, how long it is retained, and who can access it. Nothing is buried in small-print footnotes or confusing legal language.

πŸ‘€
Your Full Rights Over Your Own Data

You have the right to access, correct, transfer, and request deletion of your personal data. Surga77 will process each request within 30 working days upon completion of identity verification.

πŸ“‹
SECTION 1

Introduction & Scope of the Privacy Policy

This Privacy Policy ("Policy") describes how Surga77 ("we", "the platform") collects, uses, discloses, and protects your personal information when you use the Surga77 website, mobile app, and all related services we provide to players in Malaysia.

Surga77 is committed to protecting its members' privacy and complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. We recognise that your trust in us depends greatly on how we handle your personal information.

This Policy applies to all Surga77 users, including visitors without an account, registered members, and VIP programme users. By using the Surga77 platform, you acknowledge that you have read and understood this Privacy Policy.

If you have any privacy-related enquiries, you may contact our Data Privacy Officer at privacy@surga77.biz at any time.

πŸ“₯
SECTION 2

Types of Personal Data We Collect

Surga77 collects various types of information necessary to provide our services to you. Below is a full breakdown of the data categories we collect:

Data Category Information Type Purpose of Collection
Identity Data Full name, date of birth, MyKad/MyPR number Identity verification & legal compliance
Contact Data Phone number, email address Account & security communications
Financial Data E-wallet numbers (TNG, GrabPay), FPX details Processing deposits & withdrawals
Activity Data Betting history, game logs, wins/losses Account management & compliance
Technical Data IP address, device type, operating system, browser Platform security & improvements
Communication Data Live Chat records, support emails, call logs Customer service records

The financial data we collect is limited to what is strictly necessary to process your transactions β€” we do not store your PIN, e-wallet passwords, or credit card details. All transactions are processed through verified, secure payment channels.

βš™οΈ
SECTION 3

How We Use Your Data

Surga77 uses your personal data for the following disclosed purposes:

  • Account Management: Creating, verifying, and managing your Surga77 account, including the VIP programme and rewards.
  • Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks), as well as withdrawals to your account.
  • Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and security breaches.
  • Legal Compliance: Meet compliance obligations with relevant authorities, including legally mandated mandatory reporting.
  • Service Improvement: Analysing usage patterns to improve the playing experience, update the interface, and introduce new features.
  • Service Communications: Sending important notifications relating to your account, security, and policy updates.
  • Marketing (with Consent): Sending promotions, exclusive offers, and information about new games β€” only if you have opted in to receive them.

You can opt out of marketing emails at any time by clicking the "Unsubscribe" link at the bottom of any promotional email or through the communication settings in your account.

🀝
SECTION 4

Data Sharing & Disclosure to Third Parties

Surga77 does not sell your personal data to any third party. However, we may share your data in the following limited circumstances:

  • Payment Provider: Required transaction information is shared with verified payment processors (such as TNG eWallet, GrabPay, and DuitNow service providers) solely for the purpose of processing your deposits and withdrawals.
  • Game Provider: Minimal technical data may be shared with game platform providers such as Pragmatic Play or Evolution Gaming for technical and licensing compliance purposes.
  • Audit & Compliance: Data may be disclosed to independent auditors or licensing bodies that verify our platform's compliance.
  • Legal Authorities: Surga77 will disclose data when required by a court order, warrant, or valid legal obligation under Malaysian law.
  • Business Merger: In the event of a company merger or acquisition, data may be transferred as part of that transaction, subject to prior notification being provided to you.

All third parties with whom we share data are bound by strict confidentiality and data protection agreements. They are permitted to use your data only for the purposes specified in those agreements.

πŸ›‘οΈ
SECTION 5

Data Security Measures

Surga77 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, or damage:

  • 256-bit SSL Encryption: All communications between your browser and Surga77's servers are protected with military-grade SSL encryption.
  • Two-Factor Authentication (2FA): Available and recommended for all accounts to add an extra layer of protection.
  • 24/7 Security Monitoring: Our systems are continuously monitored to detect and respond to any suspicious activity.
  • Internal Access Controls: Only authorised personnel who require access to specific data to carry out their duties may access it.
  • Data Backup & Recovery: Data is backed up regularly at separate, secure locations to prevent data loss.
  • Penetration Testing: Our security systems are regularly tested by independent security experts.

While we take all reasonable steps to protect your data, no internet transmission system is 100% secure. Please also take precautions on your end, such as not sharing your password and using a secure Wi-Fi network.

πŸͺ
SECTION 6

Cookie Policy

Surga77 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

You can manage your cookie settings through your browser preferences. However, disabling essential cookies may affect the functionality of the Surga77 platform. For guidance on managing cookies in your browser, please refer to your browser's help documentation.

πŸ—ƒοΈ
SECTION 7

Data Retention Period

Surga77 retains your personal data only for as long as necessary to fulfil the purpose of collection or as required by law:

Data Type Retention Period Reason
Active Account Data For the duration of the active account Ongoing account management
Financial Transaction Records 7 years after transaction PDPA & Tax Legal Requirements
Security Logs 2 years Security & fraud investigations
Customer Support Records 3 years Dispute resolution & service quality
Closed Account Data 5 years after closure Abuse prevention & compliance

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

βš–οΈ
SECTION 8

Your Personal Data Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international standards, you have the following rights regarding your personal data:

πŸ‘οΈ
Right of Access

Request a copy of all personal data we hold about you in a readable format.

✏️
Right to Rectification

Request correction of any inaccurate or incomplete personal data held in our records.

πŸ—‘οΈ
Right to Erasure

Request deletion of your data under certain circumstances, subject to legal obligations.

πŸ“¦
Right to Data Portability

Request your data in a machine-readable format for transfer to another service.

🚫
Right to Object

Object to the processing of your data for direct marketing or on the basis of legitimate interests.

⏸️
Right to Restrict Processing

Request a restriction on the processing of your data in certain circumstances while a dispute is being resolved.

To exercise any of the rights above, submit a written request to privacy@surga77.biz along with a copy of your identification document for verification purposes. We will process your request within 30 days work.

πŸ‘Ά
SECTION 9

Children's Data Protection

Surga77 is a platform designed exclusively for individuals aged 18 years of age and above. We do not knowingly collect any personal information from individuals under the age of 18.

If we discover that personal data of a child has been collected without our knowledge, we will take immediate steps to:

  • Delete all data related to that individual from our systems
  • Immediate closure of the associated account
  • Notifying a parent or guardian where contact information is available

If you believe a child has registered on Surga77 or that we have collected their data, please contact us immediately at privacy@surga77.biz.

πŸ”„
SECTION 10

Amendments to This Privacy Policy

Surga77 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other legitimate reasons. We will notify you of any material amendments through the following means:

  • Email notification to your registered email address
  • In-platform notifications when you log in
  • Update the "Last Updated" date at the top of this document

Your continued use of the Surga77 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. The latest version of this Policy is always available on the Surga77 website, and you are encouraged to review it periodically.

πŸ“¬
SECTION 11

How to Contact Us for Privacy Issues

If you have any questions, concerns, or complaints regarding how Surga77 handles your personal data, please contact our Data Privacy Officer:

πŸ“§
Privacy Email
privacy@surga77.biz
πŸ’¬
Live Chat
Available 24/7 on the platform
πŸ“ž
General Support
support@surga77.biz

We will endeavour to resolve any privacy concerns you may have within 14 working days. If you are not satisfied with our response, you have the right to refer your complaint to the Malaysian Communications and Multimedia Commission (MCMC) or the relevant data protection supervisory authority.

Our commitment: Every valid privacy complaint will be acted upon. We regard your trust as the most important value to uphold, ensuring Surga77 remains the platform of choice for members in Malaysia.

Join 500,000+ Malaysian Members Who Trust Surga77

Surga77 takes your data privacy seriously. With 256-bit SSL encryption, a strict no-data-sale policy, and full PDPA Malaysia compliance, you can play with peace of mind knowing your information is always protected. Register today and experience the difference for yourself.

  • 256-bit SSL Encryption β€” your data is fully secured
  • No data sold to third parties
  • Data deletion & access rights guaranteed
  • Full Compliance with Malaysia's PDPA

πŸ”ž 18+ only Β· Your data is protected Β· T&C apply

Bahasa Melayu