Privacy Policy surgagg – Your Data Security

Surgagg is an online entertainment platform operating under the domain surgagg.win and offers a wide range of games including Slots, Bingo, Sports Betting, and Live Casino to eligible users in Malaysia. We understand that privacy is of utmost importance to each of our members, and we are fully committed to protecting the personal information you entrust to us.

This Privacy Policy is designed to provide a clear and transparent overview of our data management practices. It explains what data we collect, why we need it, how we use it, who it may be shared with, and what your rights are as the owner of that data.

By registering and using the surgagg platform, you agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, we ask that you refrain from using our services. For any privacy-related enquiries, our customer support team is available via Live Chat 24/7.

Surgagg collects two main categories of data: information you provide directly during registration and platform use, and information collected automatically when you browse our website.

Data you provide directly:

• Full name as stated in your official identification document.
• Date of birth for minimum age verification of 18 years.
• Active email address used for account communications.
• Mobile phone number registered in your name.
• Bank account or e-wallet details for deposit and withdrawal purposes.
• A copy of your identity document (MyKad or Passport) during the KYC process.
• Bank statements or other supporting documents required for verification.

Data collected automatically:

• IP address and general geographic location information.
• Device type, operating system, and browser version used.
• Game history, betting, deposits, and withdrawals within the platform.
• Account login and logout timestamps.
• Session data and platform usage patterns.

Surgagg uses your personal data only for lawful and defined purposes. Every use of data has a clear legal basis, whether grounded in contract, legal obligation, legitimate business interest, or your consent.

• Account Management: Creating, verifying, and maintaining your member account, including KYC processes mandated by law.
• Transaction Processing: Processing deposits, withdrawals, and bonus payments securely and efficiently through supported payment methods.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorized access, and any suspicious activity.
• Legal Compliance: Fulfilling reporting obligations to relevant authorities as required under Malaysian law.
• Service Communications: Sending important notifications related to your account, transactions, promotions, and policy updates.
• Service Improvements: Analyzing usage patterns to improve user experience, platform performance, and game offerings.
• Responsible Gaming: Monitoring gameplay patterns to identify members who may need assistance or gaming limits.

Surgagg does not sell members' personal data to any third party. However, in the course of legitimate platform operations, there are certain situations where your data may be shared with the following parties:

• Payment Service Providers: Required transaction information is shared with registered payment gateways and financial institutions to process your deposits and withdrawals.
• KYC Service Providers: Identity information is shared with approved KYC verification providers for identity and age verification purposes.
• Game Software Providers: Certain game data is shared with game software providers to ensure proper game functionality.
• Authority: surgagg will disclose required information to law enforcement agencies, regulatory bodies, or government authorities when mandated by law.

All third-party service providers we engage are bound by strict confidentiality agreements and are only permitted to process your data for specific purposes agreed upon with surgagg.

Your data security is surgagg's highest priority. We continuously invest in world-class security infrastructure to ensure your personal and financial data remains fully protected.

• Data Encryption in Transit: All communications between your device and surgagg's servers are protected by TLS 1.3 protocol with AES-256 encryption.
• Stored Data Encryption: Sensitive data such as financial information and identity documents is stored in encrypted form on our servers.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA to add an extra layer of security to their accounts.
• Continuous Security Monitoring: Our systems are monitored around the clock by a cybersecurity team to detect and respond to any threats promptly.
• Regular Security Testing: Security audits and penetration testing are conducted regularly by qualified independent third parties.
• Internal Access Controls: Only authorised surgagg staff with a legitimate business need are permitted to access members' personal data.

The surgagg website uses cookies and similar tracking technologies to enhance your browsing experience and help us understand how members interact with our platform.

Types of cookies we use:

• Essential Cookies: Required for basic website functions such as login session management and security. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how visitors use our website, such as the most frequently visited pages and error messages received. All information is anonymized.
• Functional Cookies: Allowing the website to remember your preferences (such as language and region) to deliver a more personalized experience.
• Analytics Cookies: Helping us understand website traffic and usage patterns through internal analytics tools. This data is used to improve our platform.

You can manage and delete cookies through your browser settings. However, disabling certain cookies may affect the functionality and user experience on the surgagg platform.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by surgagg:

Surgagg retains your personal data only for as long as it is needed for the purposes stated in this policy, or as required by applicable laws and regulations. When data is no longer needed, it will be securely deleted or anonymised.

• Active account information is retained for the duration your account remains active, plus any mandatory retention period following account closure.
• Financial transaction records are retained for a minimum of seven (7) years to comply with Malaysia's financial and tax regulatory requirements.
• Game history records are retained for a minimum of three (3) years for dispute resolution and audit purposes.
• Technical and security logs are retained for 90 days and then automatically deleted.
• Customer support correspondence is retained for two (2) years from the date of the last interaction.

Surgagg reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements. All amendments take effect immediately upon publication on this page.

For significant amendments that materially affect your privacy rights, we will:

• Sending email notifications to your registered address at least 14 days before amendments take effect.
• Displaying clear notification banners on the surgagg website and app.
• Updating the "Last Updated" date at the top of this page.

It is your responsibility to review this Privacy Policy periodically. Continued use of the surgagg platform after any changes are published will be considered your acceptance of the updated policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how surgagg handles your personal data, our Data Protection Officer team is ready to assist:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the website.
• Privacy Email: [email protected] – for specific enquiries related to privacy and data protection.
• General Support Email: [email protected] – for general enquiries related to your account and services.

We are committed to responding to all privacy-related enquiries within 14 days working days. For formal complaints regarding data protection, please send an email with the subject line "Official Privacy Complaint" along with your full details and account number.

If you are dissatisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant authority in your jurisdiction.