Protecting your personal information is our top priority. Learn how surga77 collects, uses, and safeguards your data in accordance with Malaysia's Personal Data Protection Act 2010.
Surga77 implements a comprehensive range of data protection measures to keep your information safe at all times.
All data transmitted between your device and the surga77 servers is protected with industry-grade 256-bit SSL encryption, ensuring your information cannot be intercepted by any party.
Surga77 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). Every data collection and usage process adheres to the prescribed legal requirements.
Surga77 has never and will never sell, rent, or transfer your personal data to third parties for marketing purposes without your explicit and informed consent.
As a surga77 member, you have full rights to access, correct, and delete your personal data. Requests can be submitted to our support team at any time.
Your data is stored on servers protected by strict access controls, multi-layered firewalls, and round-the-clock security monitoring by our technical team.
Collected data is used solely for the purposes stated in this policy — namely for platform operations, identity verification, payment processing, and service improvement.
Surga77 is an online sports betting and casino platform operating in Malaysia. We understand that privacy and the protection of personal information are fundamental rights of every user. This Privacy Policy is drafted to clearly and transparently explain how we manage your personal data — from the point of collection through to deletion.
This document applies to all users who visit the Surga77 website, register as a member, or use any of the services we offer. This policy should be read together with Terms and Conditions us for a more complete overview.
Surga77 acts as the data controller responsible for the personal information you provide to us. This means we make decisions regarding the purpose and manner in which your data is processed, and we are fully accountable for ensuring that data is managed securely, responsibly, and in compliance with applicable laws in Malaysia.
By browsing our website, registering an account, or using any feature of the Surga77 platform, you are deemed to have read, understood, and agreed to this Privacy Policy. If you do not agree with any part of this policy, you are advised not to use our platform and to contact our support team to request deletion of your data.
Surga77 only collects data necessary to operate the platform safely and efficiently. We do not collect excessive or irrelevant data beyond the scope of our services. The following are the categories of data we collect:
| Data Category | Purpose of Collection | Legal Basis |
|---|---|---|
| Identity Information | Account registration & KYC verification | Contractual & legal requirement |
| Financial Information | Deposit & withdrawal processing | Contractual requirement |
| Technical Data | Security & fraud detection | Legitimate interest |
| Usage Data | Platform improvement & analytics | Legitimate interest & consent |
| Communications | Customer support & records | Legitimate interest |
Every piece of data collected by surga77 is used for specific and lawful purposes. We do not use your data beyond the scope of the purposes stated below, except with your explicit consent or as required by law:
Surga77 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are specific situations where we may need to share your information with trusted parties:
In situations where data needs to be transferred outside Malaysia — for example, to international cloud service providers — Surga77 ensures that a level of data protection equivalent to Malaysia's PDPA is maintained through appropriate data protection contracts and recognised transfer mechanisms.
Surga77 uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and gather analytics data that helps us improve our services.
You can manage or disable cookies through your browser settings at any time. Please note, however, that disabling essential cookies may affect the functionality of the Surga77 platform and your overall user experience. Refer to your browser's documentation for detailed guidance on managing cookies.
Surga77 continuously invests in security infrastructure to ensure your personal data is protected against unauthorised access, disclosure, alteration, or destruction. The following are the security measures we have implemented:
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and our own policies, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. Data access requests will be processed within 21 business days.
You have the right to request correction of any data that is inaccurate, incomplete, or outdated. Some corrections may require supporting document verification.
You may request deletion of your personal data upon account closure, subject to mandatory legal retention requirements we are obliged to comply with.
You may object to the processing of your data for direct marketing purposes at any time without providing a reason. Requests will be processed immediately.
You have the right to receive your personal data in a machine-readable format for transfer to another service provider where applicable.
In certain situations, you may request that the processing of your data be temporarily restricted while a dispute or review is pending resolution.
To exercise any of the rights above, please contact our support team via live chat or email. We will verify your identity before processing any request to protect the security of your data.
Surga77 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable law. The following are our general data retention guidelines:
| Data Type | Retention Period | Reason |
|---|---|---|
| Active account information | For as long as the account is active | Service operations |
| Financial transaction records | 7 years after transaction | Legal & tax requirement |
| KYC Documents | 5 years after account closure | AML Compliance |
| Security logs | 2 years | Security investigation |
| Customer support records | 3 years | Referrals & improvements |
| Analytics cookie data | 13 months | Usage trend analysis |
Once the specified retention period has elapsed, data will be securely deleted or anonymised so that it can no longer be associated with you as an individual.
The surga77 platform is exclusively for individuals aged 18 years and above. We do not intentionally collect, store, or process any personal data from individuals under the age of 18.
Surga77 enforces strict age verification procedures during the registration process, including KYC document checks, to ensure compliance with this minimum age requirement. Should we discover that data belonging to an individual under the age of 18 has been collected without our knowledge, we will immediately delete that data and close the account in question.
Surga77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements. Any significant amendments will be communicated to members via their registered email or in-platform notification at least 14 days before the changes take effect.
The 'Last Updated' date at the top of this document indicates when this Privacy Policy was last reviewed. We encourage you to revisit this page periodically to ensure you are always aware of our latest data protection policy.
Your continued use of the surga77 platform after any amendments to this Privacy Policy take effect will be considered your acceptance of the revised terms. If you do not agree with the changes, you must stop using the platform and contact us to close your account.
If you have any questions, concerns, or wish to exercise your data protection rights, please contact our Data Protection Officer through the following channels:
We aim to respond to all privacy-related inquiries within 5 business days. For requests involving data access, correction, or deletion, processing may take up to 21 business days depending on the complexity of the request.
Surga77 puts your privacy and security first. Register now and enjoy a safe, fair, and exciting betting experience alongside thousands of members across Malaysia.