Surga777 Privacy Policy – Malaysia Player Personal Data Protection

To provide a secure, personalised, and high-quality service, surga777 collects various types of information from users. We only collect what is strictly necessary — nothing more.

In addition to information you provide directly, surga777 also automatically collects certain data while you use the platform — such as login activity records, in-platform navigation history, and game performance data. All of this is used solely to enhance your security and experience.

Every piece of information we collect has a clear and legitimate purpose. surga777 uses your data for the following purposes:

• Account management: Create, verify, and maintain your account on the surga777 platform.
• Transaction processing: Process deposits, withdrawals, and all other financial transactions you carry out on the platform.
• Security and fraud prevention: Detect and prevent suspicious activity, unauthorised access, and any form of fraud that could affect you or the platform.
• Legal compliance: Meet applicable legal and regulatory requirements, including KYC and anti-money laundering obligations.
• Service communications: Send important notifications related to your account, security, transactions, and platform updates.
• Platform improvements: Analyse usage patterns to improve the features, performance, and overall experience of the surga777 platform.
• Customer support: Help resolve any enquiries, complaints, or technical issues you report to our support team.
• Marketing (with consent): Send information about promotions, bonuses, and special offers — only if you have given consent to receive them.

Surga777 does not sell, transfer, or disclose your personal information to third parties for commercial purposes. However, in certain limited situations, we share necessary information with authorised parties:

• Payment service providers: Transaction information is shared with payment processors such as FPX, Touch 'n Go, and GrabPay solely to process your deposits and withdrawals. They are bound by their respective privacy policies.
• Game providers: Minimum game session data is shared with game providers (such as Pragmatic Play, PG Soft) to enable games to function correctly. No personally identifiable information is shared.
• Regulatory bodies and law enforcement: If required by law or court order, surga777 will disclose the necessary information to the relevant authorities.
• Analytics services: Anonymised usage data is shared with analytics tools to help us understand usage patterns and improve the platform. This data cannot be used to personally identify you.

Surga777 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.

We use several types of cookies for different purposes:

• Essential Cookies: Required for core platform functions such as login session verification and account security. These cookies cannot be disabled.
• Performance Cookies: Collect information about how you use the platform to help us identify and resolve technical issues.
• Functional Cookies: Store your preferences such as language choice and display settings for a more personalised experience.
• Analytics Cookies: Help us understand aggregate usage patterns for continuous improvement. This data is not linked to your personal identity.

You can control and manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of some parts of the surga777 platform.

The security of your data is a responsibility we take extremely seriously. surga777 implements multiple layers of technical and organisational protection to ensure your information remains safe at all times.

Technical security measures we use:

• Data encryption in transit using 256-bit TLS/SSL protocols
• Data encryption at rest for all sensitive information
• Two-factor authentication (2FA) for all user accounts
• 24/7 monitoring by automated threat detection systems
• Regular security testing by independent third-party audit teams
• Role-based access control for all internal staff

Data retention period: surga777 retains your personal data for the period required to fulfil the original purpose of collection, or for as long as required by law — whichever is longer. Once the retention period ends or an account is closed, data will be securely deleted in accordance with our standard procedures.

Surga777 operates on server infrastructure that may be located in various locations. This means your data may be processed outside Malaysia in certain circumstances, particularly in connection with game provider services or international payment processing.

In all such cases, surga777 ensures that:

• Data transfers are only made to countries or entities with an equivalent or higher level of data protection
• Adequate data protection agreements have been established with all recipients of data outside the country
• The same level of security and protection is maintained regardless of where data is processed

As a surga777 user, you have certain rights regarding your personal data that we fully respect. These rights include:

• Right of access: You may request a copy of all personal data we hold about you at any time.
• Right to rectification: If any of your information is inaccurate or incomplete, you may request that we correct it.
• Right to erasure: You may request deletion of your personal data, subject to applicable legal requirements and our compliance obligations.
• Right to restrict processing: In certain circumstances, you may request that we restrict how we use your data.
• Right to object: You may object to the processing of your data for specific purposes such as direct marketing.
• Right to data portability: You may request that your data be transferred in a machine-readable format to yourself or a nominated third party.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the validity of processing carried out prior to withdrawal.

To exercise any of these rights, please contact the surga777 support team via live chat in your account. We will process your request within a reasonable timeframe and inform you of the action taken.

Surga777 is an entertainment platform intended solely for individuals aged 21 and above. We do not knowingly collect or process personal data from individuals below this age limit.

If we discover that we have inadvertently collected data from underage individuals, immediate action will be taken to:

• Closing the relevant account immediately
• Deleting all personal data associated with that account
• Returning any available balance in accordance with the appropriate procedures

The surga777 platform may contain links to third-party websites or services in certain contexts, such as game providers or payment channels. This Privacy Policy applies only to the surga777 platform and does not cover the privacy practices of any such third-party websites or services.

Surga777 is not responsible for the privacy policies, content, or data collection practices of any third-party websites. We encourage you to read the privacy policy of each platform you visit separately.

If you have any questions, concerns, or requests regarding this Privacy Policy or how surga777 handles your personal data, please contact our customer support team, available 24 hours a day, 7 days a week.

You can reach us via:

• Live chat within your surga777 account (fastest method)
• Email our data protection team at [email protected]

Privacy Policy Updates: surga777 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technologies we use. Any material changes will be clearly displayed at the top of this page along with the amendment date.

Continued use of the surga777 platform after any Privacy Policy amendments are published will be considered your acceptance of the updated terms. We encourage you to review this page periodically.