Your privacy is our priority. This document clearly explains how surgaplay collects, uses, stores, and protects your personal information as a member of our wagering platform.
This Privacy Policy is effective from 1 January 2026. By using the SurgaPlay platform, you agree to the data protection terms stated herein. We encourage you to read this document in full to understand your rights and the protections available to you.
Surgaplay values the privacy of every member who trusts us with their personal information. As an online wagering platform operating in Malaysia, we understand that your trust depends not only on financial security, but also on how we handle your personal data responsibly.
This Privacy Policy is designed to comply with international data protection standards and to ensure you always know who holds your information, what it is used for, and how you can control your own data. We do not sell, rent, or disclose your personal information to third parties for marketing purposes without your explicit consent.
We only collect information that is strictly necessary to provide our services to you. Below are the categories of data we collect and the reasons for collecting them:
| Data Category | Sample Information | Primary Purposes |
|---|---|---|
| Identity Data | Full name, date of birth, IC number | KYC verification & age restriction |
| Contact Data | Email, phone number | Communication & account security |
| Financial Data | Bank account number, account holder name | Deposit & withdrawal processing |
| Technical Data | IP address, device type, browser | Security & fraud detection |
| Usage Data | Betting history, games played | Service improvement & promotions |
| Communications Data | Live chat logs, support tickets | Customer service quality |
We also collect information automatically as you browse our platform, including log data, session cookies, and device information. This data helps us detect suspicious activity and keep your account secure at all times.
Every piece of data we collect is used for a clear and lawful purpose. surgaplay does not use your data for any purpose not stated in this Privacy Policy without first obtaining your consent. The following are the primary purposes for data use:
We apply a "minimum necessary data" approach — meaning we only process data that is strictly required to achieve the stated purpose. No excess data is collected purely as a backup without a solid justification.
Surgaplay does not sell your personal information to any third party. However, there are certain situations where we need to share your data with trusted parties to ensure our services run smoothly:
We do not share your information with third-party advertisers, marketing companies, or any entity that has no direct involvement in delivering surgaplay services to you.
Protecting your personal data is a responsibility we take extremely seriously. surgaplay implements multiple layers of technical and organisational security to ensure your information is always safeguarded:
Surgaplay uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.
Types of cookies we use:
You can manage your cookie settings through your browser at any time. Please note that disabling certain cookies may affect the functionality of some parts of our platform.
As a surgaplay member, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:
You have the right to request a copy of all personal data we hold about you. Requests will be processed within 14 working days.
If your information is inaccurate or out of date, you have the right to request an immediate correction via your profile settings or customer support.
You may request the deletion of your personal data under certain circumstances, subject to applicable legal compliance obligations.
You may object to the processing of your data for direct marketing purposes at any time, without providing any reason.
You have the right to receive your personal data in a machine-readable format for transfer to another platform if desired.
In certain circumstances, you may request that we restrict the processing of your data while any dispute is being resolved.
Surgaplay retains your personal data for as long as your account is active or as long as necessary to provide services to you. Retention periods vary by data type:
Once the retention period expires or a valid deletion request has been processed, your data will be permanently deleted from our systems using secure erasure methods that ensure the data cannot be recovered.
Surgaplay reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. We will notify you of any significant changes via:
Continued use of the surgaplay platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account by contacting our support team.
If you have any questions, concerns, or requests regarding your privacy and personal data protection, our team is ready to assist through the following channels:
We are committed to responding to all privacy-related enquiries within 3 working days. For data access or deletion requests, we aim to resolve them within 14 working days from the date the request is received.
Six tangible commitments we uphold in protecting every member's privacy
All your data is protected by 256-bit SSL encryption — the same technology used by leading banking institutions worldwide. Your data cannot be read by any unauthorized party.
Surgaplay has never and will never sell your personal information to advertisers, data brokers, or any third party for commercial purposes. Your data belongs to you, not to us as a business asset.
You can access, correct, or request deletion of your data at any time. Our Privacy Policy gives you full control — not empty promises, but enforceable rights.
Our security systems operate 24/7 to detect any intrusion attempts or suspicious access to your account. Proactive action is taken before any damage can occur.
Our privacy policy is built in accordance with internationally recognised data protection standards. We continuously update our practices to stay aligned with the latest developments in global privacy law.
We have a dedicated channel for privacy-related enquiries. Our team is trained to handle data requests with sensitivity and professionalism within the required timeframe.
Create a free account today and enjoy a safe, fair, and fully protected betting experience.