Privacy Policy surga77 — We Take Your Data Seriously

Surga77 cares about the privacy of every player who entrusts us with their personal information. We recognise that personal data is a trust, and we are committed to managing it in a transparent, secure, and rights-respecting manner.

This Privacy Policy applies to all information collected through the surga77.vin website, the official surga77 mobile app, and any communication channels we operate, including live chat and customer support email.

We encourage you to read this policy carefully. If any section is unclear or you have any questions, our support team is available 24 hours a day, 7 days a week.

Surga77 collects your personal information through several means — directly when you register or interact with the platform, and automatically through standard tracking technologies during use.

Surga77 uses the personal data collected for the following purposes, and no more:

• Account management: Creates, verifies, and maintains your player account so that every login experience is smooth and secure.
• Transaction processing: Enables deposits and withdrawals to be processed accurately and quickly according to your preferred payment method.
• KYC compliance: Verifies player identity to meet legal requirements and prevent fraud and money laundering.
• Customer support: Identifies your account and understands the context of your enquiry so our support team can provide accurate and effective assistance.
• Platform security: Detects suspicious activity, fraud attempts, or the use of multiple accounts in violation of our terms of service.
• Service improvement: Analyses usage patterns on an aggregated, anonymous basis to understand player needs and improve platform quality.
• Service communication: Sends important notifications related to your account, transactions, or changes to our policies.
• Relevant promotions: With your consent, to contact you about offers and promotions that may interest you based on your gaming preferences.

Surga77 does not make any automated decisions that materially affect players based solely on data processing without human involvement.

Surga77 does not sell or rent player personal data to any third party. However, in certain situations, we may need to share information with the following parties:

• Payment providers: Required transaction information is shared with payment providers such as FPX and digital wallet providers solely for the purpose of processing deposits and withdrawals.
• Technology service providers: Third parties that assist us in operating the platform infrastructure, analytics, and cybersecurity — all bound by strict confidentiality agreements.
• Game providers: Minimum technical data required to enable gameplay is shared with our licensed game providers.
• Regulatory authorities: When required by law or by a directive from a competent authority, we will disclose the necessary information in accordance with proper legal procedures.

Protecting your personal data is surga77's highest priority. We implement multiple layers of technical and organisational security to ensure your information remains safe at all times:

• Encryption of data in transit: All communications between your browser or app and our servers are secured using TLS 1.3 protocol with 256-bit encryption.
• Encryption of data at rest: Sensitive data such as financial information and identity documents is stored in encrypted form on our servers.
• Multi-layered access controls: Only surga77 staff with a legitimate job requirement are permitted to access player data, and every access is recorded in an audit log.
• Continuous threat monitoring: Our intrusion detection system operates 24/7 to detect and respond to any suspicious activity in real time.
• Regular security audits: Independent security assessors conduct regular penetration testing and system audits to identify and close any vulnerabilities before they can be exploited.

While we take all reasonable precautions, no security system is entirely foolproof. We encourage players to also play their part by using strong passwords and never sharing their login credentials with anyone.

Surga77 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled as they are essential for the platform to operate.
• Performance cookies: Helps us understand how players use the platform — which pages are visited most, where players spend the most time — so we can make meaningful improvements.
• Functional cookies: Remembers your preferences and settings — such as language and display preferences — so you don't have to reconfigure them every time you log in.
• Analytics cookies: Collects usage data on an aggregated, anonymous basis to help us understand overall platform performance.

You can manage your cookie settings through your internet browser at any time. Please note that disabling essential cookies may affect platform functionality and your gaming experience.

As a surga77 player, you have the following rights regarding your personal data, in accordance with the Personal Data Protection Act 2010:

To exercise any of the above rights, contact our support team via live chat or email at [email protected]. We will process your request within 7 business days.

Surga77 retains player personal data for as long as the account is active and for the required period following account closure to meet legal and regulatory obligations. Our data retention principles are as follows:

• Active account data is retained for as long as the account remains active and in use.
• Following account closure, financial transaction records are retained for a minimum of 7 years to meet Malaysia's tax and financial regulatory requirements.
• Customer support communication records are retained for 3 years after the last interaction.
• Technical data such as access logs is retained for 12 months for security purposes and incident investigation.
• Once the retention period expires, data is securely deleted using methods that ensure the information cannot be recovered.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate action to delete that information and close the account in question. Parents or guardians with concerns about their child's privacy in the context of this platform are encouraged to contact us promptly.

Surga77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data management practices, new legal requirements, or service improvements.

When significant changes occur, we will notify players via:

• A clear notice on the homepage of our platform.
• Notification emails to all registered players.
• Updates to the "Updated" date visible at the top of this page.

Continued use of the surga77 platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy terms. We encourage you to review this page periodically.

If you have any questions, concerns, or wish to exercise your privacy rights, the surga77 team is ready to assist. You can reach us via:

• Live chat: Available on our platform 24 hours a day, 7 days a week — the fastest way to get a response.
• Email: Send your privacy enquiry to [email protected] and we will respond within 2 business days.