Surga888 takes the protection of every member's personal data seriously. This policy transparently explains how we collect, use, store and protect your information in accordance with Malaysia's Personal Data Protection Act 2010.
Six core principles that guide how we manage members' personal data
All personal and financial data transmitted between your device and Surga888's servers is protected by 256-bit SSL encryption — the same security technology used by Malaysia's leading banking institutions, including Maybank and CIMB.
Surga888 does not sell, rent, or disclose members' personal information to any third party for marketing or commercial purposes without the member's explicit consent. Your data belongs to you — we are simply its custodian.
The Surga888 Privacy Policy is drafted in compliance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA). We ensure that all processing of members' personal data has a sound legal basis and is carried out responsibly.
We only collect personal data that is genuinely necessary to provide you with Surga888's services. This "minimum collection" principle means we do not request information that is irrelevant or unnecessary for the operation of our platform.
Every Surga888 member has the right to access their personal data, request corrections to inaccurate information and, in certain circumstances, apply for data deletion. These requests can be submitted to our support team at any time.
Members' personal data is stored in a secure server environment with strict access controls. When data is no longer required or once an account is closed, it will be securely destroyed in accordance with Surga888's established procedures.
This Privacy Policy describes how Surga888 ("we", "Platform") collect, use, disclose and protect your personal information ("Member", "you") when you use our website, mobile applications and services. By using the Surga888 platform, you agree to the practices described in this Privacy Policy.
Surga888 is an online betting platform operating in Malaysia, offering live casino, Sports Betting, e-sports, lottery, and slots services to registered members. In the course of these operations, we collect and process certain members' personal data as part of our operational, security, legal compliance, and service improvement requirements.
We understand that privacy is a matter of great importance to Malaysians. The trust you place in Surga888 by registering and using our platform is something we do not take lightly. That is why we have put together this Privacy Policy in detail and in plain, easy-to-understand language — not in confusing legal jargon.
This Privacy Policy is drafted in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and internationally recognised data protection principles. We are committed to complying with all relevant legal requirements in the handling of our members' personal data.
Surga888 collects various categories of personal data depending on how you use the platform and our operational requirements. Below is a full breakdown of the data we may collect:
| Data Category | Type of Information | How It Is Collected |
|---|---|---|
| Identity Information | Full name, date of birth, MyKad number, gender, nationality | Registration form, KYC verification |
| Contact Information | Phone number, email address, residential address | Account registration, profile updates |
| Financial Data | Digital wallet account numbers (TnG, GrabPay, DuitNow), deposit and withdrawal transaction records | Payment processing, transaction verification |
| Platform Activity Data | Betting history, games played, account balance, bonus usage records | Automatically through activity on the platform |
| Technical Data | IP address, browser type, operating system, device type, cookie data | Server logs, tracking technologies |
| Communication Data | LiveChat conversation records, support emails, satisfaction survey responses | Interactions with the customer support team |
We do not collect categories of sensitive data unrelated to platform operations, such as health information, political views, or religious beliefs, except in very limited circumstances and with the member's explicit consent.
You may choose not to provide certain information, but this may limit your ability to use specific features of the platform Surga888 such as the identity verification process for higher-value withdrawals.
Surga888 uses the personal data collected for legitimate and reasonable purposes. We do not use your data for any purpose not stated below without obtaining additional consent from you:
The legal bases we rely on to process your data include: contract performance (for platform services), legal obligations (for KYC and AML), legitimate interests (for platform security), and consent (for marketing communications).
Surga888 does not sell members' personal data to any third party for commercial purposes. However, in the course of operating the platform, we may share personal data in the following limited circumstances:
All third parties with whom we share data are required to uphold data protection standards equivalent to those of Surga888 and may only use the data for the specified purpose. We do not permit third parties to use our members' data for their own marketing purposes.
The Surga888 platform uses cookies and similar tracking technologies to enhance the user experience, maintain platform security and analyse usage patterns. Below are the types of cookies we use:
You can manage your cookie settings through your web browser. However, disabling all cookies may cause certain features of the Surga888 platform to malfunction, including login and security functions.
The Surga888 platform also uses technologies such as web beacons and local storage for purposes similar to cookies. All use of these technologies is aimed at improving our service to members, not for unrelated surveillance purposes.
Surga888 continually invests in security infrastructure to ensure members' personal data remains protected at all times. Our security measures include:
While we take all reasonable precautions, no security system can guarantee 100% protection against every cyber threat. In the event of a data security breach affecting members, Surga888 will notify affected members within a reasonable timeframe and take immediate action to contain the damage.
Surga888 retains members' personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by applicable Malaysian law.
Data Retention Period:
Once the retention period expires and no other legal requirement mandates continued storage, Surga888 will securely destroy or anonymise the personal data using industry-recognised methods.
If you close your Surga888 account, most personal data that is no longer required will be deleted within 90 days. However, records needed for legal compliance will continue to be retained for the period prescribed under Malaysian law.
Under Malaysia's Personal Data Protection Act 2010 and our policy, you have the following rights regarding the personal data we hold about you:
You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 working days. A nominal fee may apply for repeated or extensive requests.
If the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. Basic information can be updated directly through your account settings.
In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to our legal retention obligations — financial and KYC records may need to be retained even after a deletion request.
You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may unsubscribe via the link included in every marketing email we send.
In certain circumstances, such as while we are verifying the accuracy of your data, you may request that we temporarily restrict the processing of your personal data.
You may request a copy of your personal data in a machine-readable format (such as CSV or JSON) for the purpose of transferring it to another service provider, subject to applicable technical limitations.
To exercise any of the rights above, please contact the Surga888 data protection team by email at support@surga888.best with the subject line "Privacy Rights Request" or via our platform's LiveChat. We will verify your identity before processing any data-related request to protect the security of your account.
The Surga888 platform is strictly for individuals aged 18 and above. We do not knowingly collect, store, or process any personal data from individuals under the age of 18.
Should we discover that we have inadvertently collected data from a person under the age of 18, we will take immediate steps to delete that data and close the account in question. Parents or guardians who become aware that their child has registered with Surga888 should contact us immediately at support@surga888.best so that we can take prompt action.
Surga888 uses an age verification system during registration and may request identity verification documents (MyKad) to confirm a member's age at any time. This forms part of our commitment to responsible gambling and the protection of minors.
Surga888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or developments in platform operations. The "Updated" date at the top of this page will reflect the date of the most recent amendment.
When we make material changes to this Privacy Policy, we will notify members via:
It is each member's responsibility to review this Privacy Policy periodically. Your continued use of the Surga888 platform after any amendment is published constitutes your acceptance of the updated policy. If you do not agree with the changes made, you have the right to stop using the platform and close your account.
If you have any questions, concerns, or complaints regarding this Privacy Policy or the way Surga888 handles your personal data, please contact us through the following channels:
We aim to respond to all privacy-related enquiries within 3 working days. For formal requests relating to data rights (access, correction, deletion), please provide your account details so we can verify your identity before processing the request.
If you are dissatisfied with our response to a privacy-related complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory body in accordance with applicable Malaysian law.
This Privacy Policy should be read alongside the other documents governing the use of the Surga888 platform: Terms & Conditions and Responsible Gaming. All of these documents together form the complete agreement between you and Surga888.
Questions frequently asked by members about the protection of their personal data
Register with Surga888 with complete confidence — your privacy is protected, payments via TnG or DuitNow are processed within minutes, and 24-hour Bahasa Malaysia support is always available.
Your personal data is fully protected. We do not sell your information — we use it solely to provide you with the best possible experience. Focus on your game; leave the privacy to us.
See also: Terms & Conditions · Responsible Gaming · Frequently Asked Questions