Privacy Policy surga55

1 Introduction

Surga55 is an online casino entertainment platform operating under the domain surga55.vin. We understand that member trust is our most valuable asset. That is why protecting your privacy is not merely a compliance requirement — it is a core value of surga55.

This Privacy Policy clearly and transparently explains how we handle every aspect of your personal data, from the moment you first browse our website through to registering as a member and enjoying the games we offer. This document applies to all Surga55 platform users, including visitors, registered members, and VIP members.

We encourage you to read this document carefully in full. Should you have any questions, our support team is available via 24/7 LiveChat.

2 Information We Collect

Surga55 collects various categories of information to ensure the platform operates smoothly, securely, and in compliance with legal requirements. Below is a detailed breakdown of the types of data we collect:

2.1 Information You Provide Directly

• Identity Information: Full name, date of birth, national identity card number (MyKad) or passport.
• Contact Information: Email address, mobile phone number, and residential address.
• Financial Information: Bank name, bank account number, and payment methods used for deposits and withdrawals.
• KYC Verification Documents: Copies of identification documents, proof of address, and other documents required for account verification.
• Account Information: Username, password (stored in hashed format), and account preferences.

2.2 Information Collected Automatically

• Technical Data: IP address, device type, operating system, browser type, and screen resolution.
• Usage Data: Pages visited, time spent on the platform, games played, and interaction patterns.
• Transaction Data: Deposit, withdrawal, wagering, wins, and bonus activity history.
• Location Data: General location information based on IP address for jurisdictional compliance purposes.

3 How We Use Your Information

Every piece of data we collect is used for a clear and legitimate purpose. surga55 does not use your data for purposes unrelated to platform operations without first obtaining your consent.

• Account Management: Creating, verifying, and securely maintaining your member account.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions in your account.
• KYC & AML Verification: Meeting legal requirements related to identity verification and anti-money laundering.
• Platform Security: Detecting and preventing fraud, duplicate accounts, and suspicious activity.
• Customer Support: Providing technical assistance and resolving any issues encountered by members.
• Personalised Experience: Personalising promotional displays, game recommendations, and offers based on your preferences.
• Service Communications: Sending important notifications related to your account, security, and platform updates.
• Continuous Improvement: Analysing usage patterns to improve platform quality and performance.
• Legal Compliance: Fulfilling obligations to regulatory bodies and law enforcement authorities.

4 Sharing Information with Third Parties

Surga55 does not sell, rent, or transfer your personal data to any third party for marketing or commercial gain. However, there are specific situations where we need to share your information to ensure the platform operates properly and remains legally compliant.

4.1 Trusted Service Providers

We share only the necessary data with service providers who have signed strict data protection agreements:

• Payment Processors: FPX, e-wallets, and payment gateways used for deposits and withdrawals.
• Game Providers: Game development companies that supply slot, casino, and betting content on our platform.
• Identity Verification Services: Third-party KYC providers that assist in verifying member documents.
• Cloud & Infrastructure Services: Server and data storage providers that store your information in a secure environment.
• Customer Support: LiveChat platform used for real-time communication with members.

4.2 Disclosure to Authorities

Surga55 will disclose information to regulatory authorities or law enforcement when required by applicable law, or when we have strong grounds to believe that such disclosure is necessary to protect the rights, property, or safety of surga55, our members, or the public.

5 Cookies and Tracking Technologies

The surga55 platform uses cookies and similar technologies to enhance the user experience, maintain secure login sessions, and collect analytics data that helps us understand how members use our platform.

5.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled.
• Performance Cookies: Collecting anonymous data on how pages are used to help us improve platform performance.
• Functional Cookies: Saving your preferences such as language, display settings, and game preferences for a more personalised experience.
• Analytics Cookies: Used by our internal analytics tools to understand usage patterns and improve platform content.

5.2 Managing Cookies

You can manage and delete cookies through your browser settings. Please note that disabling essential cookies may affect platform functionality, including the ability to log in to your account. We recommend keeping essential cookies enabled for the best gaming experience.

6 Data Retention Period

Surga55 retains your personal data only for as long as necessary to fulfil the original purpose of collection and to meet applicable legal obligations. The following are general data retention guidelines:

• Active Account Data: Retained for the duration your account remains active on Surga55.
• Transaction & Financial Data: Retained for a minimum of 7 years after transactions, in accordance with financial and tax legal requirements.
• KYC Documents: Retained for 5 years after account closure or termination of the business relationship.
• Security & Audit Logs: Retained for 12 months for security investigation and fraud detection purposes.
• Support Communications: Retained for 2 years to ensure service continuity and case reference.
• Closed Account Data: After account closure, data is retained for the minimum legally required period before being securely deleted.

7 Data Security Measures

Surga55 invests seriously in security infrastructure to ensure your personal and financial data remains protected at all times. Our security approach is multi-layered and comprehensive, covering technical, operational, and internal procedural aspects.

• Data Encryption in Transit: All communications between your device and our servers are secured with TLS 1.3 protocol and AES-256 encryption.
• Data Encryption at Rest: Sensitive data including passwords, banking information, and KYC documents are stored in encrypted format that cannot be read without the encryption key.
• Two-Factor Authentication (2FA): Members are encouraged to enable two-factor authentication for an added layer of security when logging in.
• Continuous Monitoring: Our system monitors all account activity 24 hours a day, 7 days a week to detect any unusual behaviour.
• Regular Penetration Testing: We conduct regular security testing by independent experts to identify and remediate system vulnerabilities.
• Internal Access Control: Only staff with a legitimate business need are granted access to member data, and every access is recorded.
• Incident Response Plan: We have clear procedures in place to respond to any data breach, including notifying affected members within the required timeframe.

8 Your Rights as a Data Subject

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by surga55:

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: If the information we hold is inaccurate or incomplete, you have the right to request an immediate correction.
• Right to Erasure: Under certain circumstances, you may request that your personal data be deleted, subject to applicable legal retention obligations.
• Right to Restrict Processing: You may request that the processing of your data be restricted in certain circumstances while a dispute is being resolved.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for transfer to another service provider.
• Right to Withdraw Consent: You may withdraw consent previously given, although this will not affect the validity of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our team via LiveChat or email at [email protected]. We will process your request within 30 working days or earlier if possible. In some cases, we may need to verify your identity before processing the request.

9 Child Data Protection

The surga55 platform is strictly for individuals aged 18 years and above. We do not intentionally collect, store, or process any personal data from individuals under the age of 18.

If you believe a child has registered or used our platform without parental or guardian knowledge, please contact us immediately at [email protected]. We will take immediate action to investigate, terminate the account in question, and delete all data associated with that individual.

10 Links to Third-Party Platforms

The surga55 platform may contain links to third-party websites or services, such as game providers or payment partners. Please note that this Privacy Policy applies solely to the surga55 platform and does not cover the privacy practices of those third parties.

We are not responsible for the content, privacy policies, or security practices of any third-party websites. We encourage you to read the privacy policy of every platform you visit before providing any personal information. Accessing third-party links is done at your own risk.

11 Amendments to the Privacy Policy

Surga55 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology updates. Any amendments made will be published on this page along with the new effective date.

For material amendments, we will endeavour to notify members via in-account notifications or registered email at least 14 days before the changes take effect. Continued use of the platform after the effective date of any amendment is considered your acceptance of the updated policy.

We encourage you to review this page regularly to stay informed about how we protect your privacy. The latest revision date is always displayed at the top of this document.

12 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us through the following channels:

• LiveChat: Available 24/7 via the chat icon at the corner of the platform.
• Email: [email protected] — we aim to respond within 1–2 business days.

For requests related to your data rights (access, correction, deletion), please clearly state the type of request and include sufficient identity verification information so we can process it securely and accurately.