Privacy Policy surga55 – Your Personal Data Protection

Surga55 values the privacy of every member who uses our platform. This Privacy Policy is crafted to ensure you fully understand how your personal information is managed with care and responsibility.

As an online entertainment platform operating for the Malaysian market, surga55 fully complies with the provisions of Personal Data Protection Act 2010 (PDPA) Malaysia. This policy applies to all users who access the surga55 platform through our website or mobile app.

By registering or using the surga55 platform, you consent to us processing your personal information in accordance with the terms set out in this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to process your account closure.

Surga55 collects several categories of information depending on how you interact with our platform. The following are the types of information we collect:

Information you provide directly:

• Full name, date of birth, and gender upon registration.
• Your registered email address, mobile number, and residential address.
• Identity verification documents such as MyKad or passport for the KYC process.
• Bank account or e-wallet details for deposit and withdrawal purposes.
• Any communications you send to our support team.

Automatically collected information:

• Your IP address, device type, operating system, and web browser version.
• General location data derived from your IP address for security and compliance purposes.
• Platform activity logs including login times, games played, and transaction history.
• Cookie data and tracking technologies that support platform functionality and usage analytics.

Information from third parties:

• Verification information from payment service providers such as DuitNow and FPX.
• Reports from third-party identity verification agencies used for the KYC process.

Information collected is used solely for legitimate purposes related to the operation of the surga55 platform. We do not process your data for any other purpose without notifying you in advance.

The primary purposes for which your data is used include:

• Account management: Creating, verifying, and securely maintaining your member account.
• Transaction processing: Managing deposits, withdrawals, and all financial activity within your account.
• KYC verification: Meeting legal requirements related to identity verification and anti-money laundering (AML).
• Customer support: Providing effective assistance when you contact our support team.
• Platform security: Detecting and preventing fraud, unauthorised access, and suspicious activity.
• Service improvement: Analysing usage patterns to improve the overall user experience.
• Promotional communications: Sending information about the latest promotions and offers — only to members who have consented to receive them.
• Legal compliance: Fulfilling reporting obligations to the relevant authorities when required by law.

Surga55 does not sell, rent, or disclose your personal information to third parties for their own marketing purposes. However, there are limited situations where we need to share your information with certain parties:

• Payment service providers: Transaction information is shared with payment processors such as banks and e-wallet operators to facilitate your deposits and withdrawals.
• Identity verification services: Data required for the KYC process is shared only with approved third-party verification providers bound by strict confidentiality agreements.
• Technology providers: Our technical infrastructure providers who help operate the surga55 platform, subject to data processing agreements compliant with PDPA.
• Legal authorities: We will disclose information when lawfully required to do so by a court, regulatory body, or Malaysian law enforcement agency.
• Business transfers: In the event of a merger, acquisition, or asset sale, user information may be transferred as part of that transaction with equivalent privacy protections maintained.

Protecting your personal data from unauthorised access, loss, or disclosure is a core technical and operational priority of surga55. We continuously invest in the latest security infrastructure to ensure your information remains protected at all times.

The security measures we implement include:

• 256-bit SSL encryption: All data transmitted between your device and surga55 servers is encrypted using industry-standard TLS/SSL protocols.
• Secure password storage: Your account password is never stored in plain text — we use strong hashing with a unique salt for every account.
• Two-factor authentication (2FA): An additional security layer is available and strongly encouraged for all surga55 members.
• 24/7 monitoring: Our real-time monitoring system detects and responds to any suspicious account activity without delay.
• Regular security audits: Our technical infrastructure undergoes independent security assessments on a regular basis to identify and address potential vulnerabilities.
• Internal access controls: Only authorised surga55 staff with a legitimate business need may access members' personal data.

While we implement comprehensive security measures, no online system can guarantee absolute 100% security. You also play an important role in protecting your account by keeping your password confidential and not sharing your login credentials.

Surga55 uses cookies and similar tracking technologies to enhance platform functionality and deliver a better user experience. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collecting information on how you use the platform to help us continuously improve the overall user experience.
• Functionality cookies: Saving your preferences such as display language and custom settings so you don't need to reconfigure them on every visit.
• Analytics cookies: Helps us understand traffic patterns and platform usage through privacy-compliant analytics tools.

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect certain features of the surga55 platform.

Surga55 retains your personal information only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian law.

• Active account data: Retained for the duration your account remains active and for the required period after account closure for audit and legal compliance purposes.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with Malaysian financial and tax regulatory requirements.
• KYC Documents: Retained for a minimum period of seven (7) years following account closure in accordance with anti-money laundering (AML) requirements.
• Support communication logs: Retained for three (3) years for reference and service improvement purposes.
• Cookie data: Expiry varies by cookie type — session cookies expire when the browser is closed, while persistent cookies are stored until their set expiration date.

Once the applicable retention period has expired, your data will be securely deleted or anonymised in accordance with surga55's established data disposal procedures.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal information held by surga55:

To submit any request relating to your privacy rights, please contact the surga55 support team via live chat within the platform. We aim to respond to all privacy requests within 14 business days.

The surga55 platform is exclusively for individuals who are aged 18 years and above only. We do not intentionally collect or process personal information from individuals under the age of 18.

If we discover that personal information of a minor has been collected without our knowledge, we will take immediate action to delete that information and close the account in question. Parents or guardians who suspect their child has registered an account at surga55 are encouraged to contact us immediately.

Surga55 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. The latest update date will always be displayed at the top of this page.

For significant changes, we will provide reasonable notice through one or more of the following methods:

• In-platform notifications on surga55 when you log in.
• Email to the address registered in your account.
• Clear notices on the surga55 website homepage.

Continued use of the surga55 platform after any amendments are published constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by surga55, our team is available 24 hours a day, 7 days a week.

The fastest way to reach us is via live chat within the surga55 platform. You may also reach us via our official email:

For more information about your rights under Malaysia's PDPA, you may refer to the official website of the Department of Personal Data Protection (PDPA) Malaysia.