Surgaplay cares about your privacy. This document explains in detail how we collect, use, store, and protect your personal information as a user of our platform.
Six core pillars of data protection at SurgaPlay
Every personal and financial detail you submit to our platform is protected by 256-bit SSL encryption — the same security standard used by the world's leading banks.
Your personal data is stored on servers protected by multi-layered access controls, enterprise-grade firewalls and real-time threat monitoring around the clock.
You have full control over your data — including the right to access, correct, download or request deletion of your personal information at any time.
Surgaplay has never and will never sell, rent, or share your personal data with advertisers or data brokers. Your data is used solely for the purposes stated in this policy.
Our operations fully comply with Malaysia's Personal Data Protection Act (PDPA). We appoint an internal data protection officer to ensure every data processing activity meets legal requirements.
You can choose to receive or opt out of any marketing communications from us at any time via your account settings, with no conditions or fees.
Surgaplay ("us", "Platform" or "SurgaPlay.vin") respects the privacy of every individual who uses our services. This Privacy Policy transparently explains how we collect, process, store and protect your personal information when you use our website, mobile app or any services associated with SurgaPlay.
This policy applies to all SurgaPlay platform users including visitors, registered members and VIP members. By continuing to use our platform, you agree to the terms set out in this Privacy Policy.
Legal Compliance: surgaplay operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards on personal data protection. We are committed to continuously updating our data protection practices in line with the latest legal developments.
If you have any questions about this Privacy Policy or how we handle your personal information, please contact our team through the channels listed at the end of this document.
Surgaplay collects various types of information depending on how you interact with our platform. The following are the categories of data we collect:
| Data Category | Type of Information | Primary Purposes |
|---|---|---|
| Identity Data | Full name, date of birth, MyKad number, KYC selfie photo | Identity verification & compliance |
| Contact Data | Phone number, email address, residential address | Communications & notification delivery |
| Financial Data | Bank account number, deposit & withdrawal records | Payment processing |
| Technical Data | IP address, device type, web browser, operating system | Security & platform improvements |
| Usage Data | Game history, game preferences, active session duration | User experience & responsible gaming |
We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive information such as biometric data, medical records, or religious beliefs unless required by law.
Third-Party Data: In some cases, we may receive information about you from third-party KYC service providers we use for identity verification. This information is used exclusively to ensure the security of your account.
Every piece of data we collect is used for a clear and lawful purpose. The following are the primary purposes of data processing at surgaplay:
Surgaplay will not use your data for any purpose other than those stated above without first obtaining your consent.
Surgaplay does not sell or rent your personal data to any third party for marketing purposes. However, there are limited situations where we need to share your information with others:
All third parties we work with are required to sign strict data protection agreements and comply with the security standards set by surgaplay. We have zero tolerance for data breaches by our partners.
Protecting your personal data is surgaplay's highest priority. We continuously invest in the latest security infrastructure to keep your information safe at all times.
Security measures we implement include:
Incident Response: In the event of any data breach affecting your personal information, surgaplay is committed to notifying you within 72 hours from the moment the incident is detected, in line with international data protection best practices.
As a surgaplay user, you have the following rights regarding your personal data under Malaysia's PDPA and our internal policies:
You may request a copy of all personal data we hold about you at any time.
You may update or correct any inaccurate or outdated personal information.
You may request the deletion of your personal data, subject to applicable legal requirements.
You may request that we restrict the processing of your data in certain situations as defined by law.
You may request your data in a structured, machine-readable format for transfer to another platform.
You may object to the processing of your data for direct marketing purposes at any time, with no conditions.
To exercise any of the above rights, please contact our privacy team by email at [email protected]. We will process your request within 14 business days.
Surgaplay uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.
Types of cookies we use:
You can manage your cookie settings through your web browser or via the SurgaPlay account settings panel. Please note that disabling certain cookies may affect the functionality of some parts of the platform.
In the course of platform operations, some of your personal data may be transferred to, stored or processed outside Malaysia, particularly for server infrastructure and international payment processing purposes.
Surgaplay ensures that any international data transfers are carried out with adequate safeguards, including:
Note: Even when data is processed outside Malaysia in certain cases, your rights as a user remain fully protected under the provisions of Malaysia's PDPA and this privacy policy.
Surgaplay retains your personal data for as long as your account is active or as long as necessary to provide services to you. When an account is closed, data is retained for a defined period before being securely deleted.
Once the retention period expires, your data will be permanently deleted or anonymised using secure, irreversible methods.
Surgaplay strictly prohibits the registration and use of the platform by individuals under the age of 18. Our platform is not designed for children, and we do not knowingly collect personal data from minors.
Should we discover that personal data of an individual under the age of 18 has been collected without our knowledge, that data will be deleted immediately and the account in question will be closed. Parents or guardians who discover their child has registered on our platform are requested to contact us immediately.
We also support online child protection initiatives and work with relevant authorities to ensure our platform remains safe and free from underage users.
Surgaplay reserves the right to update this Privacy Policy from time to time to reflect changes in our operational practices, legal requirements, or technological developments. Any changes made will be published on this page with a clear effective date.
For material changes that significantly affect your rights, we will:
Our Recommendation: We encourage you to review this Privacy Policy page periodically, at least once every six months, to stay informed about how we manage your data.
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our privacy team through the following channels:
Our privacy team will respond to all inquiries within 14 business days. For urgent data security matters, please contact us via Live Chat for the fastest response.
For more information on the platform's terms of use, please refer to Terms & Conditions ours. For healthy and responsible gaming guidance, visit the Responsible Gaming ours.
Join over 500,000 SurgaPlay members enjoying digital entertainment in a safe, transparent and responsible environment. Your data is protected, your games are fair.
Minimum age 18. Play responsibly.