Surga55 Privacy Policy – Protection of Your Personal Data

Welcome to the surga55 Privacy Policy. We understand that your trust is the most valuable asset we must safeguard. When you register and use the surga55 platform, you entrust us with your personal information — and we do not take this responsibility lightly.

This Privacy Policy clearly explains how surga55 collects, uses, stores, protects, and shares your personal data when you use our website at surga55.vu, the official mobile app, and all related services. This document applies to all registered users and visitors of the surga55 website.

Surga55 operates in compliance with Malaysia's Personal Data Protection Act (PDPA) 2010 and relevant international data protection standards. We are committed to ensuring your data is handled transparently, securely, and only for clearly stated purposes.

Surga55 collects your personal data through several channels — directly from you during registration, automatically as you use the platform, and in some cases from trusted third parties. Below is a breakdown of the data categories we collect:

Every piece of data we collect has a clear and legitimate purpose. surga55 uses your personal data for the following purposes:

• Account Management: Create, verify, and maintain your member account, including the KYC process required by law.
• Transaction Processing: Process deposits, withdrawals, and all financial transactions securely and accurately.
• Platform Security: Detect and prevent fraud, money laundering, unauthorized access, and other suspicious activities.
• Service Improvement: Analyse usage patterns to improve platform performance, user experience, and game offerings.
• Service Communications: Send important notifications about your account, transactions, policy changes, and security updates.
• Customer Support: Resolve enquiries, complaints, and support requests more efficiently based on your account records.
• Legal Compliance: Fulfil legal obligations including reporting to relevant authorities when required.
• Marketing Communications: Send relevant promotions and exclusive offers — only if you have consented to receive them.

Surga55 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. However, in the course of operating the platform safely and lawfully, there are limited situations where we need to share your data:

• Payment Providers: Required transaction information is shared with licensed payment processors to facilitate your deposits and withdrawals.
• KYC Verification Services: Identity data is shared with recognised third-party verification service providers to maintain platform integrity.
• Regulatory Authority: surga55 is required to comply with lawful information requests from relevant legal authorities or regulatory bodies.
• Technical Service Providers: Cloud service and technical infrastructure providers bound by strict confidentiality agreements.
• Gaming Partners: Minimum required information is shared with licensed game providers for game operation purposes only.

All third parties who receive your data are bound by data protection obligations equal to or stricter than this Privacy Policy. surga55 is responsible for ensuring all partners comply with the established data protection standards.

Protecting your data from unauthorized access, loss, or misuse is a core technical priority at surga55. We continuously invest in the latest security infrastructure to keep your information safe at all times.

• 256-bit SSL/TLS Encryption: All data transmitted between your device and surga55 servers is protected with the highest level of encryption.
• Two-Factor Authentication (2FA): An additional security layer is available for all member accounts to prevent unauthorized access.
• 24/7 Monitoring: Automated security monitoring systems operate around the clock to detect and respond to security threats.
• Internal Access Control: Your personal data is accessible only to surga55 staff who require it to perform their duties.
• Regular Security Audits: Our security systems and procedures are regularly audited by independent parties to identify and address any vulnerabilities.
• Secure Data Backup: Data is regularly backed up to a secure, separate location to ensure service continuity.

Surga55 does not retain your personal data longer than necessary for the original purpose of collection or as required by law. The following are the data retention guidelines we adhere to:

• Active Account Data: Retained for the duration your account remains active, plus the minimum period required by law following account closure.
• Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with Malaysia's financial and tax legal requirements.
• KYC and Identity Verification Data: Retained for a minimum of five (5) years after the business relationship ends, in accordance with anti-money laundering regulations.
• Support Communication Logs: Retained for three (3) years for service reference and dispute resolution purposes.
• Technical Data and System Logs: Retained for a maximum of twelve (12) months for security and technical troubleshooting purposes.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.

When data is no longer needed and there is no legal obligation to retain it, surga55 will securely delete or anonymise that data using recognised methods.

As a data subject, you have the following rights regarding your personal data held by surga55. We are committed to respecting and facilitating the exercise of these rights:

Surga55 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device when you visit our website.

You can manage or disable cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the surga55 platform.

The surga55 platform may contain references to or integrations with third-party services such as game providers, payment processors, and support service providers. This Privacy Policy applies only to data handled directly by surga55.

When you interact with third-party services through our platform, the respective third party's privacy policy applies to data they collect. surga55 is not responsible for the privacy practices of such third parties, though we always strive to partner only with those who uphold high data protection standards.

Surga55 is an exclusive platform for adults aged 18 and above. We do not knowingly collect, store, or process personal data from individuals under the age of 18.

If we find that personal data has been collected from a person under the age of 18 without proper age verification, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who suspect that a child under their care has registered at surga55 are urged to contact our support team immediately.

Surga55 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform improvements. Any material changes will be communicated to members via:

• In-platform notification the first time you log in after changes take effect.
• Email notification to your registered address at least seven days before the effective date.
• Updates the "Last Updated" date at the top of this document.

Continued use of the surga55 platform after any amendment takes effect will be deemed acceptance of the updated Privacy Policy. If you do not agree with the amendments, you have the right to close your account and request data deletion in accordance with the established procedure.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by surga55, please contact us through the following channels:

• Privacy Email: [email protected] — for all inquiries related to data protection and your privacy rights.
• Support Email: [email protected] — for general inquiries and account assistance.
• Live Chat: Available 24/7 via the chat icon on the surga55 platform for immediate responses.

For more information on your rights and responsibilities, please also refer to Terms and Conditions and the Responsible Gaming us.